diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..895b843
--- /dev/null
+++ b/.env.example
@@ -0,0 +1 @@
+ADD_USER_SECRET=123quant-speed
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..05df23b
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,17 @@
+__pycache__/
+*.py[cod]
+*.log
+.DS_Store
+.env
+.env.*
+!.env.example
+env/
+venv/
+.venv/
+staticfiles/
+media/
+.idea/
+.vscode/
+*.tar
+*.mp3
+
diff --git a/main.py b/main.py
index c8d8894..a189736 100644
--- a/main.py
+++ b/main.py
@@ -9,6 +9,9 @@ from typing import Optional, List, Dict
 import random
 import uuid
 import os
+from dotenv import load_dotenv
+
+load_dotenv()
 
 app = FastAPI()
 
@@ -277,7 +280,9 @@ async def checkin_user(checkin_data: CheckinRequest):
 
 @app.get("/add-user", response_class=HTMLResponse)
 async def add_user_page(request: Request):
-    return templates.TemplateResponse("add_user.html", {"request": request})
+    secret = os.getenv("ADD_USER_SECRET", "123quant-speed")
+    print(f"DEBUG: Secret loaded: '{secret}'")
+    return templates.TemplateResponse("add_user.html", {"request": request, "secret": secret})
 
 @app.post("/api/add-user")
 async def add_user_api(user_data: AddUserRequest):
@@ -322,4 +327,4 @@ async def add_user_api(user_data: AddUserRequest):
 
 if __name__ == "__main__":
     import uvicorn
-    uvicorn.run(app, host="0.0.0.0", port=8800)
+    uvicorn.run(app, host="0.0.0.0", port=8000)
diff --git a/templates/add_user.html b/templates/add_user.html
index f3f0c3b..d462f7c 100644
--- a/templates/add_user.html
+++ b/templates/add_user.html
@@ -297,13 +297,16 @@
     </div>
 
     <script>
+        // Use secret from backend
+        const ACCESS_SECRET = "{{ secret }}";
+
         // Password Check Logic
         function checkSecret() {
             const input = document.getElementById('secret-input');
             const error = document.getElementById('secret-error');
             const overlay = document.getElementById('password-overlay');
             
-            if (input.value === '123quant-speed') {
+            if (input.value === ACCESS_SECRET) {
                 overlay.style.opacity = '0';
                 setTimeout(() => {
                     overlay.style.display = 'none';