cat > .gitignore <<'EOF'
# secrets
.env
*.env

# volumes / app data
**/db/
**/db_data/
**/postgres_data/
**/redis/
**/data/
**/html/
**/wp_data/
**/n8n_data/
**/logs/

# editor / os
.DS_Store
.idea/
.vscode/
EOF