diff --git a/.env b/.env
deleted file mode 100644
index b3351d0..0000000
--- a/.env
+++ /dev/null
@@ -1,9 +0,0 @@
-DB_HOST="10.77.77.10"
-DB_PORT="1433"
-DB_NAME="GINSENG"
-DB_USER="suprimentos"
-DB_PASSWORD="0DBFRrQswMjC4"
-DB_ENCRYPT="true"
-DB_TRUST_SERVER_CERT="true"
-DB_SERVER_NAME=GINSENG
-SESSION_SECRET="slalog-session-secret-20260804-rotate-this-value-now"
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..1669866
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,9 @@
+DB_HOST=
+DB_PORT=
+DB_NAME=
+DB_USER=
+DB_PASSWORD=
+DB_ENCRYPT=
+DB_TRUST_SERVER_CERT=
+DB_SERVER_NAME=
+SESSION_SECRET=
diff --git a/.gitignore b/.gitignore
index d24df8a..13eda7f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,6 +20,9 @@ dist-ssr
 .wrangler/
 .dev.vars
 
+# Local secrets
+.env
+
 # Editor directories and files
 .vscode/*
 !.vscode/extensions.json