diff --git a/.gitignore b/.gitignore
index be24518..6bcdec6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,8 +7,8 @@ result-*
 keys.txt
 !keys.txt.age
 
-# Explicitly allow specific keys/secrets
-!ssh-private
+# Explicitly (dis)allow specific keys/secrets
+secrets/ssh-private
 
 # macOS
 .DS_Store