# .chezmoiignore — PUBLIC tier.
#
# This is gitignore syntax. A `#` in the middle of a line becomes part of the
# pattern, silently producing an entry that matches nothing, so every comment
# in this file is on its own line. That mistake was caught by inspection once
# already; it does not announce itself.
#
# Ignoring changes what chezmoi manages. It never removes or modifies a file on
# any machine.

# Repo documentation, not a dotfile. Without this it lands as ~/README.md.
README.md

# Auto-generated by lazy.nvim on every plugin update.
.config/nvim/lazy-lock.json

# chezmoi's own config directory. Never manage the thing that configures the
# manager.
.config/chezmoi
.config/chezmoi/**

# Nested git checkouts. Configs that are repos get their own repo.
**/.git
**/.git/**

# App-managed state. Each of these is rewritten by the application that owns
# it, so a tracked copy can never match the live one and `chezmoi status` is
# never empty. Carried in the source as a starting point, applied never.
.config/btop/btop.conf
.config/herdr/config.toml

# Belt and braces on the tier boundary. The public repo does not manage any of
# these and must never start: a stray `chezmoi add ~/.config/gh` would
# otherwise sweep up an OAuth token, and the same for the bws token and the
# generated key file. These are the exact paths the phase 3 negative test
# asserts are absent on a public-only machine.
.config/gh/hosts.yml
.config/zsh/secrets.zsh
.config/bitwarden
.config/bitwarden/**
.claude.json
.claude/settings.local.json
