diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..cf6876a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/settings.ini
diff --git a/README.adoc b/README.adoc
index b728b3f..165941a 100644
--- a/README.adoc
+++ b/README.adoc
@@ -34,7 +34,7 @@
 
 == Configuration
 
-Configuration is read from the file link:settings.ini[].
+Configuration is read from the file link:settings.ini.example[settings.ini].
 You may change location of the settings file using the environment variable `CONF_FILE`.
 
 If you have Active Directory (or Samba 4 AD), then you *must* use encrypted connection (i.e. LDAPS or StartSSL) – AD doesn’t allow changing password via unencrypted connection.
@@ -56,7 +56,7 @@
 python3 app.py
 
 Then you can access the app on http://localhost:8080.
-The port and host may be changed in link:settings.ini[].
+The port and host may be changed in link:settings.ini.example[settings.ini].
 
 === Run with uWSGI and nginx
 
diff --git a/settings.ini b/settings.ini
deleted file mode 100644
index d343305..0000000
--- a/settings.ini
+++ /dev/null
@@ -1,13 +0,0 @@
-[html]
-page_title = Change your password on example.org
-
-[ldap]
-host = localhost
-port = 389
-base = ou=People,dc=example,dc=org
-search_filter = uid={uid}
-
-[server]
-server = auto
-host = localhost
-port = 8080
diff --git a/settings.ini.example b/settings.ini.example
new file mode 100644
index 0000000..d343305
--- /dev/null
+++ b/settings.ini.example
@@ -0,0 +1,13 @@
+[html]
+page_title = Change your password on example.org
+
+[ldap]
+host = localhost
+port = 389
+base = ou=People,dc=example,dc=org
+search_filter = uid={uid}
+
+[server]
+server = auto
+host = localhost
+port = 8080