diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..6c5d2e5
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,35 @@
+# Secrets & user config
+config.json
+.env
+
+# CA certificates (generated at runtime, contain private keys)
+cert/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.egg-info/
+dist/
+build/
+*.egg
+
+# Virtual environments
+venv/
+.venv/
+env/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Temp MITM certs
+domainfront_certs_*/