diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000..0ccd3788
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,86 @@
+# Ignore all
+*
+
+# Unignore all with extensions
+!*.*
+
+# Unignore all dirs
+!*/
+
+# Unignore extensionless files
+!**/LICENSE
+!**/Dockerfile
+
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
+*.so
+*.dylib
+__debug*
+*.pdb
+*.wasm
+
+# editor stuff
+*.sublime-workspace
+eslint.config.mjs
+
+# Test binary, built with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+# Dependency directories (remove the comment below to include it)
+# vendor/
+
+# User Uploads
+uploads/
+
+# temp files
+tmp/
+
+# Go workspace file
+go.work
+
+# build
+.build
+.DS_Store
+
+# bundle output (generated by cmd/bundle)
+wwwroot/bundle.min.js
+wwwroot/bundle.min.js.map
+wwwroot/bundle.min.css
+wwwroot/public.bundle.min.css
+
+#env / secrets
+.env
+.env.*
+!.env.example
+
+#database
+*.sqlite
+*.db
+
+# Bun lockfile
+bun.lockb
+
+# docker
+docker-compose.yml
+
+# generated db schema (jet generator)
+internal/dbschema/
+
+# generated FA icon registry (built from frontend/icons)
+frontend/src/ui/generated/
+
+# AI crap
+.claude
+wwwroot/public.bundle.min.js.map
+wwwroot/public.bundle.min.js
+internal/handlers/public_pages.gen.go
+# kjol framework (git submodule; deny-list above would otherwise ignore it)
+!/kjol
diff --git a/go/cmd/examples/go-wasm-web/wwwroot/app.wasm b/go/cmd/examples/go-wasm-web/wwwroot/app.wasm
deleted file mode 100755
index 345953fd..00000000
Binary files a/go/cmd/examples/go-wasm-web/wwwroot/app.wasm and /dev/null differ