@@ -28,8 +28,9 @@ SKEL_DIRS = (
 DEFAULT_DEBOPS_CONFIG = ""
 
 DEFAULT_GITIGNORE = """\
-ansible/${SECRET_NAME}
-${SECRET_NAME}
+ansible/{SECRET_NAME}
+{SECRET_NAME}
+{ENCFS_PREFIX}{SECRET_NAME}
 ansible.cfg
 
 #-- python
@@ -107,7 +108,8 @@ def write_config_files(project_root):
     # Create .debops.cfg
     write_file(os.path.join(project_root, DEBOPS_CONFIG), DEFAULT_DEBOPS_CONFIG)
     # Create .gitignore
-    write_file(os.path.join(project_root, '.gitignore'), DEFAULT_GITIGNORE)
+    write_file(os.path.join(project_root, '.gitignore'),
+               DEFAULT_GITIGNORE.format(SECRET_NAME=SECRET_NAME, ENCFS_PREFIX=ENCFS_PREFIX))
 
     hosts_filename = os.path.join(project_root, "ansible", INVENTORY, "hosts")
     # Swap in different hosts file content depending on the host's OS/distro