# Secrets — never commit backup.env encryption-key.pem # Runtime artifacts backup.log