/.direnv/
/secrets/*key*
!/secrets/*.age
!/secrets/rekeyed