# A private key must never be tracked here again.
#
# This directory used to hold a cert.crt/cert.key pair committed in 2024:
# self-signed, CN=openpanel.com, expired 23 Feb 2026 - and its private key
# was in the repository, so every clone had it and every server that used it
# shared one key with every other server. It was the fallback certificate for
# the vhost templates in ../vhosts, which now point at
# /etc/hitechcloud/native/ssl/_default/, generated per host at install time by
# native_ensure_default_cert (hitechcloudcli/lib/native.sh) and regenerated
# a month before it expires.
*.key
*.crt
*.pem
!.gitignore
