# Test credentials — never commit
.env

# Keycloak OIDC client secrets, written by keycloak-configure.sh
.oidc-secrets
.oidc-secrets.tmp

# Which Nextcloud LDAP config nextcloud-configure.sh owns (deployment state)
.nextcloud-ldap-config

# CheckMK's FreeIPA sysaccount bind credentials, written by checkmk-ldap-configure.sh
.cmk-ldap-bind