diff --git a/.gitignore b/.gitignore
index ba2b463..31bc713 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,12 @@ packages/fine-tuner/adapters/
 __pycache__/
 *.pyc
 .env*
+
+# Live deployment config — contains tokens, never commit
+deploy/ecosystem.config.cjs
+deploy/ecosystem.config.cjs.bak-*
+ecosystem.config.js
+ecosystem.config.js.bak-*
+
+# Codex/editor backup directories
+.codex-backup-*/