# build artifacts
dist/
build/
*.spec.bak
*.log

# runtime state / user data - NEVER commit (contains tokens & password hashes)
portable/
portable_test/
deploy_secrets.txt
server/*.db
server/files/
*.db

# python
__pycache__/
*.pyc
.venv/
venv/

# OS
Thumbs.db
.DS_Store

# Docker: local secrets, never commit
docker/.env