add basic .gitignore

.gitignore

@@ -0,0 +1,48 @@
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# System files
+.DS_Store
+Thumbs.db
+
+# Docker
+docker-compose.override.yml
+
+# SOPS decrypted files
+*.dec.yaml
+*.dec.yml
+*.dec.env
+*.dec.json
+
+# Secrets (keep encrypted versions)
+**/secrets.env
+!**/secrets.sops.env
+**/secrets.yaml
+!**/secrets.sops.yaml
+**/secrets.yml
+!**/secrets.sops.yml
+
+# Logs
+*.log
+logs/
+
+# Environment variables (keep .env templates)
+.env.local
+.env.*.local
+
+# SSH keys
+*.pem
+**/id_rsa
+**/id_ed25519
+!**/id_*.pub
+
+# Temporary files
+*.tmp
+*.bak
+*.backup
+.temp/
+tmp/