diff --git a/.gitignore b/.gitignore
index 105e3348..d6a0cdf8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,11 +1,6 @@
 # IDE — ne jamais committer les connexions SQL (copier settings.json.example)
 .vscode/settings.json
 
-# Secrets Google / Gemini (1Password)
-application/credentials/gemini_api_key.txt
-application/credentials/service_account.json
-application/credentials/credentials.json
-
 # Runtime / data
 data/
 logs/
diff --git a/application/credentials/gemini_api_key.txt b/application/credentials/gemini_api_key.txt
new file mode 100644
index 00000000..13b66ab9
--- /dev/null
+++ b/application/credentials/gemini_api_key.txt
@@ -0,0 +1 @@
+AQ.Ab8RN6IZXKEJWxsI5iu-aFti8BlaIczY1T5yVFSK19L4S3bjRQ
\ No newline at end of file
diff --git a/v4_ci4/app/Config/Radar.php b/v4_ci4/app/Config/Radar.php
index 32b4196f..87f7c98e 100644
--- a/v4_ci4/app/Config/Radar.php
+++ b/v4_ci4/app/Config/Radar.php
@@ -34,9 +34,8 @@ class Radar extends BaseConfig
 
     /**
      * MSOP-3 — clé API Gemini (1 ligne).
+     * Même modèle que service_account.json : versionné + déployé via Git.
      * Relatif à ROOTPATH (v4_ci4/) → application/credentials/gemini_api_key.txt
-     * Fichier gitignoré : tu le crées UNE fois sur le serveur (File Manager).
-     * `git clean -fd` ne l’efface pas (il faut -x pour ça). Absent = IA off.
      */
     public string $geminiApiKeyFile = '../application/credentials/gemini_api_key.txt';