diff --git a/.gitignore b/.gitignore
index a5a1707..c1dcdbe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,37 +1,10 @@
-# Virtual environment
+secrets.liq
+config.json
 venv/
-
-# Databases (generated, contain runtime state)
-*.db
-*.db-wal
-*.db-shm
-
-# Generated caches & playlists
-genre_cache.json
-playlist.json
-playlist.m3u
-track_state.json
-track_history.json
-playlists/
-
-# Generated audio (TTS announcements, jingles are regenerated)
-announcements/
-jingles/
-
-# Logs
-*.log
-*.log.*
-
-# Python
 __pycache__/
 *.pyc
-
-# Runtime/cache
-.cache/
-
-# Legacy/backup files
-*.bak
-
-# Secrets
-secrets.liq
-ezstream.xml
+*.db
+*.log
+playlist.m3u
+playlists/
+track_state.json
diff --git a/secrets.liq.example b/secrets.liq.example
new file mode 100644
index 0000000..43edc4b
--- /dev/null
+++ b/secrets.liq.example
@@ -0,0 +1,2 @@
+# Radio Susan secrets — DO NOT COMMIT
+icecast_password = "CHANGE_ME"