diff --git a/.gitignore b/.gitignore
index 926b6d0..dac0b1c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,7 +1,20 @@
+# --- secrets / env ---
+.env
+.env.*
+!.env.example
+
+# --- local backups ---
+*.bak
+*.bak.*
+Dockerfile.bak.*
+*.swp
+*~
 node_modules/
 dist/
 .astro/
 /_release_out/
+
+# --- macOS ---
 .DS_Store
 ._*