# OpenTofu / Terraform state files
*.tfstate
*.tfstate.*

# Provider plugins and cache
.terraform/
.terraform.lock.hcl

# Sensitive variables — never commit real tokens
terraform.tfvars

# Plan files
*.tfplan