diff --git a/.gitignore b/.gitignore
index 2a7f67ef..7c00a572 100644
--- a/.gitignore
+++ b/.gitignore
@@ -124,3 +124,8 @@ Server/dist
 /release/
 /appcast.xml
 
+
+# Local secrets / env (never commit)
+.env
+.env.*
+!.env.example