Untrack config.yaml, ignore it, and add config.example.yaml

config.yaml is meant to hold real, deployment-specific secrets (bcrypt
password hashes) and the public base_url, so it shouldn't be committed.
Add it to .gitignore, remove it from version control (kept locally on
disk), and check in config.example.yaml as the template to copy from.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

config.example.yaml

@@ -0,0 +1,34 @@
+server:
+  host: "0.0.0.0"
+  port: 8080
+  # Set this to your public-facing URL so discovery responses are correct.
+  # base_url: "https://dav.example.com"
+
+auth:
+  realm: "My DAV Server"
+
+storage:
+  data_dir: "./data"
+
+logging:
+  level: "debug" # debug | info | warn | error
+  format: "text" # text | json
+
+tls:
+  enabled: false
+  # cert_file: "/etc/ssl/certs/dav.crt"
+  # key_file:  "/etc/ssl/private/dav.key"
+
+# Users: passwords must be bcrypt hashes.
+# Generate with:  htpasswd -nB alice
+# or in Go:       bcrypt.GenerateFromPassword([]byte("secret"), bcrypt.DefaultCost)
+users:
+  alice:
+    password: "$2a$10$9.WEs0uz5TaNJLQbSTLrX.Te.BIe8XTTykVRzZbSHQMEkyFb8Sq/O" # mysecretpassword
+    display_name: "Alice Smith"
+    email: "alice@example.com"
+    calendars:
+      - personal
+      - work
+    address_books:
+      - contacts