diff --git a/.gitignore b/.gitignore
index 5126ce0..e129623 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,9 @@
+# Sensitive files
+ACCOUNTS.txt
+*.key
+*.pem
+*.p12
+
 # Python
 __pycache__/
 *.py[cod]
diff --git a/deploy-production/fix-paths.sh b/deploy-production/fix-paths.sh
new file mode 100644
index 0000000..f3a42e4
--- /dev/null
+++ b/deploy-production/fix-paths.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+# Quick fix for remaining volume paths in docker-compose.prod.yml
+
+cd /opt/stiftung
+git pull
+
+# Fix remaining volume paths in docker-compose.prod.yml
+sed -i 's|./app/media|../app/media|g' deploy-production/docker-compose.prod.yml
+sed -i 's|./backups|../app/backups|g' deploy-production/docker-compose.prod.yml
+
+echo "✅ Volume paths fixed!"
+echo "Now you can run: cd deploy-production && docker-compose -f docker-compose.prod.yml up -d"