result
.direnv
.nixd.json

# Never commit plaintext secrets
*.dec.yaml
*.dec.json
*.plaintext