diff --git a/.gitignore b/.gitignore
index 9a6facf..d0e6fd5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,6 +25,7 @@ yarn-debug.log*
 yarn-error.log*
 
 # local env files
+**/.env
 .env.local
 .env.development.local
 .env.test.local
diff --git a/backend/app/src/auth/index.ts b/backend/app/src/auth/index.ts
index 1ba38f3..0147757 100644
--- a/backend/app/src/auth/index.ts
+++ b/backend/app/src/auth/index.ts
@@ -4,7 +4,7 @@ import { jwt } from '@elysiajs/jwt'
 export const jwtConfig = jwt({
   name: 'jwt',
   exp: '7d',
-  secret: 'Fischl von Luftschloss Narfidort'
+  secret: process.env.JWT_SECRET!
 })
 
 export const auth = new Elysia({ prefix: "/auth" })