diff --git a/.gitignore b/.gitignore
index bd3e967..539d6e9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,11 +8,6 @@ flask_secret_key
 /l
 /local*
 limited_domains
-make_password
 private_notes
 service_account_creds.json
-smtp_password
-smtp_user
-superfeedr_token
-superfeedr_username
 TAGS
diff --git a/protocol.py b/protocol.py
index 273a685..ab3e989 100644
--- a/protocol.py
+++ b/protocol.py
@@ -2,6 +2,7 @@
 import copy
 from datetime import timedelta
 import logging
+import os
 import re
 from threading import Lock
 from urllib.parse import urljoin, urlparse
@@ -52,7 +53,8 @@ OBJECT_REFRESH_AGE = timedelta(days=30)
 
 # require a follow for users on these domains before we deliver anything from
 # them other than their profile
-LIMITED_DOMAINS = util.load_file_lines('limited_domains')
+LIMITED_DOMAINS = (os.getenv('LIMITED_DOMAINS', '').split()
+                   or util.load_file_lines('limited_domains'))
 
 # activity ids that we've already handled and can now ignore.
 # used in Protocol.receive