diff --git a/.gitignore b/.gitignore
index 5ef6a52..1efa2b0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -39,3 +39,8 @@ yarn-error.log*
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+# Developer / deployment instructions
+# Contains sensitive production credentials (Gitea admin password, DB password, secrets, SSH keys, etc.)
+# This file MUST NEVER be committed or pushed.
+developer_instructions.txt