diff --git a/.gitignore b/.gitignore
index f26c0ed..dd4f08e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -63,3 +63,6 @@ coverage.out
 /HANDOFF.md
 /models/stt
 /models/tts
+
+# root .env — MAVEN_AMBIENT_TOKEN and friends, same class as deploy/telegram.env
+.env