# Real DB credentials — never commit
config/config.php

# Customer-uploaded files — privacy, don't push to GitHub
public/uploads/order_files/*
public/uploads/payment_screenshots/*
!public/uploads/order_files/.gitkeep
!public/uploads/payment_screenshots/.gitkeep

# Logs
storage/logs/*
!storage/logs/.gitkeep
