diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..a6c2bed
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,35 @@
+# Terraform
+.terraform/
+*.tfstate
+*.tfstate.backup
+*.tfvars
+.terraform.lock.hcl
+
+# Ansible
+*.retry
+*.log
+inventory/
+!infrastructure/ansible/inventory.ini
+!infrastructure/ansible/inventory_local.ini
+
+# Vault / Secrets
+*.json
+*.crt
+*.key
+*.pem
+vault-ca.crt
+setup_vault_secrets.sh # Enthält keine Secrets, aber zur Sicherheit falls man sie hardcodet
+infrastructure/apps/vault/file/
+infrastructure/apps/vault/logs/
+infrastructure/apps/vault/certs/
+
+# IDE / Editor
+.idea/
+.vscode/
+*.swp
+*~
+.DS_Store
+
+# OS generated
+Thumbs.db
+