diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..4a08d28
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+# Terraform secrets — never commit. Use terraform.tfvars.example as the template.
+*.tfvars
+!*.tfvars.example
diff --git a/terraform.tfvars b/terraform.tfvars
deleted file mode 100644
index 9f322dd..0000000
--- a/terraform.tfvars
+++ /dev/null
@@ -1,14 +0,0 @@
-# Proxmox 연결 정보
-proxmox_endpoint  = "https://192.168.50.87:8006"
-proxmox_api_token = "root@pam!terrform=1408ded5-c7c4-4384-8b19-64178837fb8c"
-
-# PBS 네트워크 설정
-pbs_network_bridge = "intra01" # TODO: SDN VNET 브릿지 이름으로 변경
-pbs_ip_address     = "10.1.20.11/24"
-pbs_gateway        = "10.1.20.254" # TODO: SDN 게이트웨이 확인
-dns_servers        = ["1.1.1.1", "8.8.8.8"]
-
-# Hermes Agent LXC 설정 (node1 / intra01)
-hermes_vmid           = 118
-hermes_node           = "gihyeon"
-hermes_network_bridge = "intra01"