diff --git a/.gitignore b/.gitignore
index a14702c..47fc716 100644
--- a/.gitignore
+++ b/.gitignore
@@ -32,3 +32,7 @@ report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
 
 # Finder (MacOS) folder config
 .DS_Store
+
+# Runtime secrets – never commit real values
+tokens.json
+config.json
diff --git a/config.example.json b/config.example.json
new file mode 100644
index 0000000..fb07621
--- /dev/null
+++ b/config.example.json
@@ -0,0 +1,28 @@
+{
+  "alwaysOn": false,
+  "refreshRate": 10000,
+  "layout": {
+    "header-left": "clock",
+    "header-right": "weather",
+    "main-1": "sl",
+    "main-2": "sbb",
+    "footer-1": "spotify",
+    "footer-2": "spacer",
+    "footer-3": "system"
+  },
+  "spotify": {
+    "clientId": "",
+    "clientSecret": ""
+  },
+  "weather": {
+    "plz": ""
+  },
+  "sl": {
+    "stationId": "",
+    "stationName": ""
+  },
+  "sbb": {
+    "stationId": "",
+    "stationName": ""
+  }
+}
diff --git a/config.json b/config.json
deleted file mode 100644
index 041f864..0000000
--- a/config.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "stationId": "9182",
-  "stationName": "Hökarängen",
-  "refreshRate": 30000
-}
\ No newline at end of file
diff --git a/tokens.example.json b/tokens.example.json
new file mode 100644
index 0000000..0d49a21
--- /dev/null
+++ b/tokens.example.json
@@ -0,0 +1,7 @@
+{
+  "spotify": {
+    "accessToken": "",
+    "refreshToken": "",
+    "expiresAt": 0
+  }
+}