diff --git a/.gitignore b/.gitignore
index 227d28a..74bb722 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,9 @@
 *.swp
 .idea/
 .vscode/
+
+# Environment / secrets — never commit real credentials.
+# Keep an .env.example template committable for future use.
+.env
+.env.*
+!.env.example