# Terraform state -- has infra addresses and (with older providers) can leak
# secrets if written unencrypted. Never commit.
terraform/.terraform/
terraform/.terraform.lock.hcl
terraform/*.tfstate
terraform/*.tfstate.*
terraform/*.tfstate.backup
terraform/crash.log
terraform/crash.*.log

# Real inputs -- contains PVE endpoint, API token, network specifics.
# Ship terraform.tfvars.example instead.
terraform/terraform.tfvars
terraform/*.auto.tfvars

# Any local override files
terraform/override.tf
terraform/override.tf.json
terraform/*_override.tf
terraform/*_override.tf.json

# CLI outputs
*.log