diff --git a/.gitignore b/.gitignore
index c18dd8d..0ec9d94 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,4 @@
 __pycache__/
+
+# Upstream EasyRSA checkout, kept alongside for reference — not part of this project
+easy-rsa/