diff --git a/.gitignore b/.gitignore
index ae185ce..ea1e53c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -28,3 +28,7 @@ Thumbs.db
 # Postgres data (local dev)
 data/
 .claude
+
+# GitHub App private keys, etc.
+secrets/
+*.pem
diff --git a/docker-compose.yml b/docker-compose.yml
index 0634312..4b2e8db 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -29,7 +29,7 @@ services:
     volumes:
       - ./data/redis:/data
     ports:
-      - "127.0.0.1:6379:6379"
+      - "127.0.0.1:6380:6379" # 6380 on host to avoid conflict with other Redis instances
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 5s
@@ -48,6 +48,8 @@ services:
       - .env
     ports:
       - "127.0.0.1:6969:6969"
+    volumes:
+      - ./secrets:/app/secrets:ro
     depends_on:
       db:
         condition: service_healthy