diff --git a/.gitignore b/.gitignore
index 57943fb..6ef27e7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -31,7 +31,7 @@ Thumbs.db
 scripts/remote_deploy.py
 scripts/redeploy_server.py
 scripts/upload_and_deploy.py
-scripts/deploy_update.py
+# deploy_update.py is tracked; rotate credentials if repo is shared
 scripts/rebuild_frontend.py
 scripts/check_server.py
 scripts/check_ports.py