diff --git a/scripts/dev.sh b/scripts/dev.sh
index c5d3fba..1044e18 100755
--- a/scripts/dev.sh
+++ b/scripts/dev.sh
@@ -15,6 +15,13 @@
 set -uo pipefail
 cd "$(dirname "${BASH_SOURCE[0]}")/.."
 
+# Local secrets (Discogs app credential etc.); gitignored, same file compose reads.
+if [ -f .env ]; then
+  set -a
+  . ./.env
+  set +a
+fi
+
 log() { printf '\033[36m[dev]\033[0m %s\n' "$*"; }
 # Stable secret so sessions survive the frequent restarts this loop does.
 export SECRET_KEY_BASE="${SECRET_KEY_BASE:-dev-only-change-me-to-a-long-random-string}"