ansible rework

ansible/.gitignore

@@ -0,0 +1,64 @@
+# Ansible-specific
+*.retry
+*.log
+.ansible/
+
+# Vault password files (NEVER commit these!)
+.vault_pass
+.vault_password
+*vault_password*
+vault-password.txt
+
+# Decrypted vault files (NEVER commit these!)
+*_vault.yaml.decrypted
+vault.yaml.decrypted
+*.vault.dec
+*.decrypted
+
+# Backup files
+*.backup
+*.bak
+*~
+*.swp
+*.swo
+
+# WireGuard client configs (may contain private keys)
+playbooks/wireguard-configs/**/*.conf
+playbooks/wireguard-configs/**/private_key
+playbooks/wireguard-configs/**/public_key
+
+# But keep the directory structure
+!playbooks/wireguard-configs/.gitkeep
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+
+# OS files
+.DS_Store
+Thumbs.db
+*.lnk
+
+# Editor files
+.vscode/
+.idea/
+*.sublime-*
+
+# Local testing
+test/
+tmp/
+.tmp/
+
+# SSH control sockets
+/tmp/
+
+# Ansible facts cache
+*.fact
+facts.d/
+
+# Molecule (if using for testing)
+.molecule/
+.cache/