diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..12c7212
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,2 @@
+# Secret environment files
+/*/*.env.secret filter=git-crypt diff=git-crypt
diff --git a/.gitignore b/.gitignore
index a982b04..d53f4b6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 /*/*
 !*/*.env
-/*/*.env.secret # Just to document that they should definitely never be added
+!*/*.env.secret
 
 # This is not necessary with the wildcard used in the first line, but it is clearer
 /swag/*