diff --git a/.gitignore b/.gitignore
index ce2f286..80d3bcb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -41,6 +41,9 @@ deploy.zip
 .phpdoc/
 .env
 .env.backup
+.env.local
+.secret
+.htaccess
 .phpunit.result.cache
 .phpdoc/cache/
 npm-debug.log
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e7ca613..13708fa 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.7.0"
+  ".": "0.7.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7c15c99..7801d38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.7.1](https://github.com/devuri/wp-env-app/compare/v0.7.0...v0.7.1) (2023-10-31)
+
+
+### Bug Fixes
+
+* ignore `.env.local` and `.secret` and `.htaccess` ([c061b98](https://github.com/devuri/wp-env-app/commit/c061b989a920c3a89bc4abf4848ba3e16a4cbd23))
+* remove `.env.local` ([8f5055e](https://github.com/devuri/wp-env-app/commit/8f5055e479d850b747a46d1c02ec2cee7d1fc06a))
+
 ## [0.7.0](https://github.com/devuri/wp-env-app/compare/v0.6.9...v0.7.0) (2023-10-31)
 
 
diff --git a/.env.local b/env.local
similarity index 100%
rename from .env.local
rename to env.local
diff --git a/public/.htaccess b/public/.htaccess
deleted file mode 100644
index c3044eb..0000000
--- a/public/.htaccess
+++ /dev/null
@@ -1,79 +0,0 @@
-# Disable directory browsing
-Options -Indexes
-
-<files .htaccess>
-Order allow,deny
-Deny from all
-</files>
-
-# AuthName "Demo Mode"
-# AuthType Basic
-# AuthUserFile /srv/users/example/apps/myapp/_htpass/.htpasswd
-# Require valid-user
-
-# BEGIN WordPress
-# The directives (lines) between "BEGIN WordPress" and "END WordPress" are
-# dynamically generated, and should only be modified via WordPress filters.
-# Any changes to the directives between these markers will be overwritten.
-<IfModule mod_rewrite.c>
-RewriteEngine On
-RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
-RewriteBase /
-RewriteRule ^index\.php$ - [L]
-RewriteCond %{REQUEST_FILENAME} !-f
-RewriteCond %{REQUEST_FILENAME} !-d
-RewriteRule . /index.php [L]
-</IfModule>
-# END WordPress
-
-# custom error messages
-ErrorDocument 403 "No Access permission."
-
-# Block WordPress xmlrpc.php
-<Files xmlrpc.php>
-  order deny,allow
-  deny from all
-</Files>
-
-# block access
-<FilesMatch "^(readme.*|license.*|composer.*|wp-config.php|README.*)$">
-    order allow,deny
-    deny from all
-</FilesMatch>
-
-# block access
-<files wp-config.php>
-    Order allow,deny
-    Deny from all
-</files>
-
-# block user enumeration
-<IfModule mod_rewrite.c>
-RewriteCond %{QUERY_STRING} ^author=([0-9]*)
-RewriteRule .* https://example.com/? [L,R=302]
-</IfModule>
-
-# Security Headers
-# <IfModule mod_headers.c>
-# Header set Access-Control-Allow-Origin www.google-analytics.com
-# Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
-# Header set Content-Security-Policy "script-src 'self' *.example.com www.google-analytics.com *.google-analytics.com *.googlesyndication.com *.google.com *.google.com *.quantcount.com *.facebook.net *.gubagoo.io .hotjar.com *.gstatic.com *.inspectlet.com *.pingdom.net *.twitter.com *.quantserve.com *.googletagservices.com *.googleapis.com *.gubagoo.io 'unsafe-inline';"
-# Header set X-Frame-Options SAMEORIGIN
-# Header set X-Content-Type-Options nosniff
-# Header set Content-Security-Policy: "frame-ancestors 'self' https://example.com"
-# Header set X-XSS-Protection "1; mode=block;"
-# Header set Referrer-Policy "same-origin"
-# </IfModule>
-
-# Wordfence WAF
-<Files ".user.ini">
-<IfModule mod_authz_core.c>
-	Require all denied
-</IfModule>
-<IfModule !mod_authz_core.c>
-	Order deny,allow
-	Deny from all
-</IfModule>
-</Files>
-
-# END Wordfence WAF