diff --git a/.gitignore b/.gitignore
index 736d212..b6f5f3f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,17 +1,75 @@
-# OS
+# OS / Editor cruft
 .DS_Store
+Thumbs.db
+*.swp
+*.swo
+*.bak
+*.tmp
+*~
 
 # Python
 __pycache__/
 *.pyc
+*.pyo
+*.pyd
+*.egg-info/
+.eggs/
+.venv/
+venv/
+env/
 
-# Ansible artifacts
+# Node (in case UI helpers creep in)
+node_modules/
+npm-debug.log
+yarn-debug.log
+yarn-error.log
+.pnpm-debug.log
+
+# Ansible
 *.retry
+# Local inventory (never commit host IPs/secrets)
+inventory/
+hosts
+.secrets/
+.vault_pass.txt
 
-# Helm build
-charts/*/charts/
-charts/*/tmp/
+# Helm / Kubernetes
+charts/*.tgz
+# Helm release cache
+.helm/
+# Kustomize build output
+kustomize-build/
+# Kubernetes local config
+.kube/
+*.kubeconfig
 
-# Local secrets (do not commit)
-secrets/
-*.enc
+# Terraform (if used later)
+.terraform/
+terraform.tfstate
+terraform.tfstate.backup
+*.tfvars
+
+# Logs
+logs/
+*.log
+
+# Coverage / test artifacts
+.coverage
+coverage.xml
+htmlcov/
+.junit/
+*.out
+*.err
+
+# Git + tooling
+.gitattributes.lock
+.editorconfig.lock
+
+# Local Railiance config
+# (token + credentials must *never* be committed)
+.railiance_gitea.conf
+
+# IDE configs
+.vscode/
+.idea/
+*.iml