diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..3224314
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+*.swp
+*.save
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..e44ab15
--- /dev/null
+++ b/README.md
@@ -0,0 +1,7 @@
+Pinecrypt Gateway firewall service handles `iptables` and `ip6tables` rule generation based on the MongoDB contents.
+
+This allows without restarting any Docker services:
+
+* Enable/disable replicas
+* WIP: Fine tune MTU, MSS parameters
+* WIP: Toggle masquerading packets