Do not track log/ and tmp/ dirs.
Don't track secret token and testing sqlite3 db.