# Copyright (c) Abstract Machines
# SPDX-License-Identifier: Apache-2.0

# Everything under certs/ is generated by this directory's Makefile, except the
# development CA and the default server certificate that ship with the
# repository.
#
# This is a denylist by intent: listing generated certificates by name meant
# each new one had to remember to add itself here, and forgetting silently left
# a private key committable. Ignore first, then re-include what is deliberately
# tracked.
certs/*
!certs/ca.crt
!certs/ca.key
!certs/magistrala-server.crt
!certs/magistrala-server.key

# Paths outside certs/.
client.crt
client.key
certbot-www/
letsencrypt/
