diff --git a/opensaas-sh/app_diff/.gitignore.diff b/opensaas-sh/app_diff/.gitignore.diff
index 33cfff7a..ca7c5763 100644
--- a/opensaas-sh/app_diff/.gitignore.diff
+++ b/opensaas-sh/app_diff/.gitignore.diff
@@ -1,31 +1,20 @@
 --- template/app/.gitignore
 +++ opensaas-sh/app/.gitignore
-@@ -2,16 +2,24 @@
- node_modules/
- **/.DS_Store
+@@ -6,6 +6,17 @@
+ .env
+ .env.*
  
--# We ignore env files recognized and used by Wasp.
-+# We ignore sensitive env files recognized and used by Wasp.
- .env.server
--.env.client
--
- # To be extra safe, we by default ignore any files with `.env` extension in them.
- # If this is too agressive for you, consider allowing specific files with `!` operator,
- # or modify/delete these two lines.
- *.env
- *.env.*
--
 +# These two we added only because dotenv-vault keeps adding them if it doesn't find them,
 +# even though we don't need them. Remove them once dotenv-vault stops doing that.
 +.env*
 +.flaskenv*
- # We don't want to ignore .env example files.
- !*.env.*.example
- !*.env.example
++
+ # Don't ignore example dotenv files.
+ !.env.example
+ !.env.*.example
++
 +# We don't want to ignore .env.client as it doesn't have any secrets.
 +!.env.client
 +# These are config files for dotenv-vault, so we don't want to ignore them.
 +!.env.project
 +!.env.vault
-+# .env.me is used by dotenv-vault as a personal credential, so we explicitly ignore it.
-+.env.me
diff --git a/template/app/.gitignore b/template/app/.gitignore
index 4a5f3cfc..fd453426 100644
--- a/template/app/.gitignore
+++ b/template/app/.gitignore
@@ -1,12 +1,11 @@
 .wasp/
 node_modules/
 
-# We by default ignore any dotenv files to avoid committing any secrets by accident.
-# If this is too agressive for you, consider allowing specific files with `!` operator,
-# or modify/delete these two lines.
+# Ignore all dotenv files by default to prevent accidentally committing any secrets.
+# To include specific dotenv files, use the `!` operator or adjust these rules.
 .env
 .env.*
-# Don't ignore example env files.
+
+# Don't ignore example dotenv files.
 !.env.example
 !.env.*.example
-