diff --git a/config/.env b/config/.env
new file mode 100644
index 0000000..4d70b01
--- /dev/null
+++ b/config/.env
@@ -0,0 +1,3 @@
+# ACME - DO NOT COMMIT
+JWT_SECRET=df20c4309025d4dec4fc3bd39712e0c371f62a7a7b8335db
+FLAG=ACME{GIT_SECRET_HISTORY}
diff --git a/docs/README.md b/docs/README.md
new file mode 100644
index 0000000..05a65ac
--- /dev/null
+++ b/docs/README.md
@@ -0,0 +1,2 @@
+# ACME Portal (training)
+TODO: remove secrets from repo.