diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index d357970..8345e44 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -49,7 +49,7 @@ jobs:
             -H "Authorization: token $TOKEN" -H "Content-Type: application/json" \
             -d "{\"tag_name\":\"$TAG\",\"name\":\"$TAG\",\"body\":\"$BODY\"}" | jq -r '.id')
           echo "Release créée (id=$REL_ID)"
-          for f in docker-compose.truenas.yml docker-compose.prod.yml .env.prod.example; do
+          for f in docker-compose.truenas.yml.example docker-compose.prod.yml .env.prod.example; do
             curl -sSf -X POST "$API/releases/$REL_ID/assets?name=$f" \
               -H "Authorization: token $TOKEN" \
               -F "attachment=@$f;type=text/plain" >/dev/null
diff --git a/.gitignore b/.gitignore
index 90937bd..4e2e400 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,10 +7,16 @@ testmedia/
 .env
 .env.prod
 .env.*.local
+# Compose de déploiement TrueNAS rempli avec les vrais secrets
+# (le modèle versionné = docker-compose.truenas.yml.example)
+docker-compose.truenas.yml
 
 # Python
 __pycache__/
 *.pyc
 
+# IDE JetBrains
+.idea/
+
 # OS
 .DS_Store
diff --git a/docker-compose.truenas.yml b/docker-compose.truenas.yml.example
similarity index 100%
rename from docker-compose.truenas.yml
rename to docker-compose.truenas.yml.example