diff --git a/.gitignore b/.gitignore
index 566c89dcce9150960ecda1ec9c38c30c75176ed7..383ffccd16e38c35b82d7f646c102dad251e822f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,5 +3,9 @@
 tmp/
 docs/_build/
 testsite/preseed_files/
+
+# Ignore "temporary" files created with the playbook tls.yml (certs, keys, and
+# host config files for GnuTLS - ca.cfg is versioned, though).
 testsite/tls/*.pem
 testsite/tls/*.key
+testsite/tls/*.*_*.cfg
\ No newline at end of file