# `platform/` — Platform engineering: infra & ops

```
platform/
├── docker/           # Multi-stage Dockerfiles per app (Phase 8)
├── k8s/              # Helm charts skeleton (Phase 8)
├── nginx/            # Reverse-proxy configs (Phase 8)
├── terraform/        # Optional IaC skeleton (Phase 8)
├── observability/    # OTel, Prometheus, Grafana, Loki (Phase 8)
└── secrets/          # .env templates only — never real secrets
```

`platform/secrets/` is gitignored except for `.env.example` files. Never commit real credentials.
