# Puppet CA data should never be version-controlled ca_data/ # Environment file with secrets .env # Puppet manifest with potentially sensitive data code/environments/production/manifests/all_system.pp