diff --git a/.gitignore b/.gitignore
index bc20d7b..6f24364 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,10 @@ node_modules/
 *.log
 .vscode/
 .idea/
+
+# Local environment — Vercel writes credentials to .env.local on `vercel env pull`.
+# Never commit any flavor of these.
+.env
+.env.local
+.env.*.local
+.vercel/