diff --git a/ansible/.gitignore b/ansible/.gitignore
index 1f012cc..bdea95e 100644
--- a/ansible/.gitignore
+++ b/ansible/.gitignore
@@ -13,3 +13,7 @@ collections/*
 # Ignore all vaults
 playbooks/vars/vaults/*
 !playbooks/vars/vaults/README.md
+
+# Ignore hidden configs
+playbooks/templates/secret/*
+!playbooks/templates/secret/README.md
diff --git a/ansible/playbooks/templates/secret/README.md b/ansible/playbooks/templates/secret/README.md
new file mode 100644
index 0000000..b451565
--- /dev/null
+++ b/ansible/playbooks/templates/secret/README.md
@@ -0,0 +1,5 @@
+These contain configs that are considered "secret" and should not be part of any git commits. This directory still follows the basic format of where the file will be located.
+
+```
+secrets/etc/somefile.cfg
+```