diff --git a/.dockerignore b/.dockerignore
index c267a33..7e2dfcf 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -9,3 +9,10 @@ index.original.html
 .claude
 .vscode
 .idea
+
+# Secrets / not needed in the image
+.codex-temp-keys
+.env
+*.pem
+*_ssh_key
+worker
diff --git a/.gitignore b/.gitignore
index d25799b..99df7c6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,11 @@ dist
 .DS_Store
 *.log
 .vite
+
+# Secrets / local-only
+.codex-temp-keys/
+.env
+.env.*.local
+*.pem
+*_ssh_key
+*_ssh_key.pub