# Private keys and the deploy-specific server certificate never go to git. # Only the public CA certificate (ca.crt) is versioned, because clients embed it. *.key *.csr *.srl server.crt