initial prototype based on nat-as-server

.gitignore

@@ -0,0 +1,64 @@
+# Secrets and session data
+tokens.jsonl
+valid_tokens.txt
+.env
+*.sh
+
+# Encrypted database, temp files, backups
+uploads/*
+!uploads/.gitkeep
+!uploads/logs/
+!uploads/logs/**
+
+# Database lock files (just in case)
+uploads/.qdb_lock
+uploads/*.lock
+
+# Logs / dumps / exports
+*.log
+logs/api/*
+!logs/api/.gitkeep
+*.sqlite
+*.db
+*.dump
+*.bak
+*.backup
+*.tmp
+*.temp
+
+# Node/npm artifacts (if website/js uses npm)
+node_modules/
+npm-debug.log
+yarn.lock
+package-lock.json
+
+# PHP composer artifacts (if using composer in future)
+tests/runtime/
+.phpunit.cache/
+vendor/
+composer.lock
+
+# IDE / editor
+.DS_Store
+Thumbs.db
+*.swp
+*.swo
+*~
+.vscode/
+.idea/
+*.code-workspace
+
+# Misc
+*.orig
+*.rej
+*.md
+
+# Ignore browser build artifacts (if any)
+website/js/dist/
+website/js/build/
+
+# Ignore backups at project root
+*.tar
+*.tar.gz
+*.zip
+*.7z