🗃️ Updated 🗃️

Dockerfile
.env.scripts
.gitattributes
.gitea/workflows/build.yml
.gitignore
README.md
rootfs/root/docker/setup/00-init.sh
rootfs/root/docker/setup/01-system.sh
rootfs/root/docker/setup/02-packages.sh
rootfs/root/docker/setup/03-files.sh
rootfs/root/docker/setup/04-users.sh
rootfs/root/docker/setup/05-custom.sh
rootfs/root/docker/setup/06-post.sh
rootfs/root/docker/setup/07-cleanup.sh
rootfs/tmp/etc/opengist/config.yaml
rootfs/usr/local/bin/entrypoint.sh
rootfs/usr/local/etc/docker/functions/entrypoint.sh
rootfs/usr/local/etc/docker/init.d/00-opengist.sh
rootfs/usr/local/etc/resolv.conf

.gitignore

@@ -1,4 +1,4 @@
-# gitignore created on 05/05/26 at 14:38
+# gitignore created on 06/12/26 at 05:07
 # Disable reminder in prompt
 ignoredirmessage
 
@@ -6,10 +6,12 @@ ignoredirmessage
 **/.build_failed*
 
 # OS generated files
+
 ### Linux ###
+# Backup files left by editors
 *~
 
-# temporary files which can be created if a process still has a handle open of a deleted file
+# Temporary files left when a process holds an open handle to a deleted file
 .fuse_hidden*
 
 # KDE directory preferences
@@ -18,11 +20,11 @@ ignoredirmessage
 # Linux trash folder which might appear on any partition or disk
 .Trash-*
 
-# .nfs files are created when an open file is removed but is still being accessed
+# NFS stale file handles
 .nfs*
 
 ### macOS ###
-# General
+.DS_Store
 .DS_Store?
 .AppleDouble
 .LSOverride
@@ -46,20 +48,23 @@ Network Trash Folder
 Temporary Items
 .apdisk
 
-### macOS Patch ###
 # iCloud generated files
 *.icloud
 
 ### Windows ###
-# Windows thumbnail cache files
 Thumbs.db
 Thumbs.db:encryptable
 ehthumbs.db
 ehthumbs_vista.db
 
-# Dump file
+# Crash dump files
 *.stackdump
 
+# Core dumps (Linux/macOS)
+core
+core.*
+vgcore.*
+
 # Folder config file
 [Dd]esktop.ini
 
@@ -73,32 +78,165 @@ $RECYCLE.BIN/
 *.msm
 *.msp
 
-# misc
-!*/README*
-!inc/main.bash
-
 # Windows shortcuts
 *.lnk
 
-# ignore commit message
+### Editors ###
+# Visual Studio Code
+.vscode/
+!.vscode/extensions.json
+
+# JetBrains IDEs (IntelliJ, GoLand, RustRover, PyCharm, etc.)
+.idea/
+*.iml
+*.iws
+*.ipr
+
+# Vim / Neovim
+*.swp
+*.swo
+.netrwhist
+Session.vim
+.vim/
+
+# Sublime Text
+*.sublime-workspace
+*.sublime-project
+
+# Eclipse / generic Java IDEs
+.project
+.classpath
+.factorypath
+.settings/
+
+### AI tool local configs (personal settings, never commit) ###
+# Claude Code
+.claude/settings.local.json
+.claude/*.lock
+
+# Cursor
+.cursor/
+.cursorignore
+.cursorindexingignore
+
+# GitHub Copilot
+.copilot/
+
+# Codeium
+.codeium/
+
+# Tabnine
+.tabnine/
+
+# Aider
+.aider/
+.aider.conf.yml
+.aider.model.settings.yml
+.aiderignore
+
+# General AI assistant local state
+.ai/
+.ai.local/
+
+### Environment and secrets ###
+# Local env overrides — never commit credentials
+.env
+.env.local
+.env.*.local
+
+# Private keys and certificates
+*.pem
+*.key
+*.p12
+*.pfx
+
+### Build artifacts ###
+build/
+dist/
+out/
+
+# Rust
+target/
+
+# C / C++ / compiled objects
+*.o
+*.a
+*.so
+*.dylib
+*.dll
+*.exe
+
+### Dependency directories ###
+# Node
+node_modules/
+
+# Go (vendored deps are sometimes committed intentionally, so gitignore only the cache)
+# vendor/
+
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+*.egg-info/
+.eggs/
+.venv/
+venv/
+env/
+
+### Logs ###
+*.log
+logs/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+### Temporary and cache ###
+tmp/
+.tmp/
+*.tmp
+*.cache
+.cache/
+
+### Test and coverage ###
+coverage/
+.coverage
+*.cover
+*.coverprofile
+htmlcov/
+.nyc_output/
+.pytest_cache/
+.tox/
+
+### Misc — always allow ###
+!*/README*
+!inc/main.bash
+
+### Project-specific patterns ###
+# ignore commit message files
 **/.gitcommit
 
-# ignore .build_failed files
-**/.build_failed*
-
-# ignore .bak files
+# ignore backup files
 **/*.bak
 
 # ignore .no_push files
 **/.no_push
+**/.nopush
 
 # ignore .no_git files
 **/.no_git
 
-# ignore .installed files
+# ignore .installed marker files
 **/.installed
 
-# ignore work in progress files
+# ignore work-in-progress rewrite/refactor scripts
 **/*.rewrite.sh
 **/*.refactor.sh
 
+# ignore local override scripts and configs
+**/*.local.sh
+**/*.local.conf
+**/*.local.yaml
+**/*.local.yml
+