diff --git a/.gitignore b/.gitignore
index 030522d..f725038 100644
--- a/.gitignore
+++ b/.gitignore
@@ -214,6 +214,10 @@ UpgradeLog*.htm
 *.mdf
 *.ldf
 
+# Environment-specific settings that may contain secrets
+appsettings.Production.json
+appsettings.Staging.json
+
 # Business Intelligence projects
 *.rdl.data
 *.bim.layout
diff --git a/Beam.Server/Beam.Server.csproj b/Beam.Server/Beam.Server.csproj
index 4831e91..a60d4ae 100644
--- a/Beam.Server/Beam.Server.csproj
+++ b/Beam.Server/Beam.Server.csproj
@@ -4,6 +4,7 @@
     <TargetFramework>net6.0</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
+    <UserSecretsId>beam-server-dev</UserSecretsId>
   </PropertyGroup>
 
   <ItemGroup>
diff --git a/Beam.Server/appsettings.json b/Beam.Server/appsettings.json
index 76af5f0..5e417d9 100644
--- a/Beam.Server/appsettings.json
+++ b/Beam.Server/appsettings.json
@@ -1,5 +1,5 @@
 {
   "ConnectionStrings": {
-    "DefaultConnection": "Data Source=sql;Initial Catalog=Beam;Integrated Security=False;User ID=sa;Password=@#^!fcIen&*asd"
+    "DefaultConnection": "REPLACE_WITH_USER_SECRET_OR_ENV_VAR"
   }
 }