diff --git a/docker/keys/.gitignore b/docker/keys/.gitignore
new file mode 100644
index 00000000..536c2e6f
--- /dev/null
+++ b/docker/keys/.gitignore
@@ -0,0 +1,5 @@
+# Ignore all files in this directory (so keys aren't pushed to Git)
+*
+
+# But don't ignore this .gitignore file itself
+!.gitignore