# Real secrets never go in git — only *.example.yaml templates do.
apps/**/secret.yaml
*.secret.yaml