diff --git a/web/.gitignore b/web/.gitignore
index 8869056..27dfd45 100644
--- a/web/.gitignore
+++ b/web/.gitignore
@@ -1,6 +1,7 @@
 node_modules
 .next
-.env
-.env.local
+# Every .env variant is secret except the committed template.
+.env*
+!.env.example
 next-env.d.ts
 *.tsbuildinfo