diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..b9728ac
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,17 @@
+# Build output
+/target
+.devbox/
+result
+result-*
+
+# The release job sources FORGEJO_TOKEN from here. Never commit it.
+.env
+
+# Identity and feed state the daemon writes at runtime, and whatever the
+# test rigs leave in a checkout.
+*.key
+*.db
+*.db-wal
+*.db-shm
+state.json
+smolboid.toml