# Credentials (server-only — never commit real values) db.php config.php # Uploads / user files uploads/ *.log # OS / editor .DS_Store *.swp