diff --git a/.gitignore b/.gitignore
index c8f36f6..e92fd54 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,8 @@
 # Never-publish workspace material (strategy, prospect research, counsel packs,
 # personal contact details). Created ad hoc; must never reach a remote.
 .private/
+
+# Cover every .env variant, not one at a time. Negate the committed
+# template so it stays tracked.
+.env.*
+!.env.example