diff --git a/README.md b/README.md
index 4b7754f..a2cc1e5 100644
--- a/README.md
+++ b/README.md
@@ -26,6 +26,7 @@ CREATE USER threadr IDENTIFIED BY 'super secure password';
 CREATE DATABASE `threadr`;
 GRANT ALL PRIVILEGES ON `threadr`.* TO 'threadr';
 ```
+Note: The config file contains secrets. Keep `config/config.json` out of version control and only commit `config/config.json.sample`.
 2. Create a config file: In the `config` subdirectory, `cp config.json.sample config.json` and edit it to suit your needs.
 3. Create an about page: Also in the `config` subdirectory, `cp about_page.htmlbody.sample about_page.htmlbody` and edit it to suit your needs.