diff --git a/.gitignore b/.gitignore
index 1c2aa20..9823957 100644
--- a/.gitignore
+++ b/.gitignore
@@ -226,6 +226,6 @@ Thumbs.db
 .idea/
 
 # custom
-/*/appsettings.protected.json
+/**/**/appsettings.protected.json
 
 **/**/deployment.yml
diff --git a/src/Nocr.TelegramClient.Host/Infrastructure/HostBuilderFactory.cs b/src/Nocr.TelegramClient.Host/Infrastructure/HostBuilderFactory.cs
index a7fa601..33b7b74 100644
--- a/src/Nocr.TelegramClient.Host/Infrastructure/HostBuilderFactory.cs
+++ b/src/Nocr.TelegramClient.Host/Infrastructure/HostBuilderFactory.cs
@@ -11,6 +11,8 @@ public class HostBuilderFactory<TStartup> where TStartup : class
             {
                 if (!string.IsNullOrWhiteSpace(baseDirectory))
                     configurationBuilder.SetBasePath(baseDirectory);
+
+                configurationBuilder.AddJsonFile("appsettings.protected.json", false);
             })
             .ConfigureWebHostDefaults(host => { host.UseStartup<TStartup>(); })
             .UseSerilog((ctx, logBuilder) =>