diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..9bbddf7
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,23 @@
+# --- sia.storage S3 credentials (from https://sia.storage dashboard) ---
+SIA_STORAGE_ENDPOINT=s3.sia.storage
+SIA_STORAGE_ACCESS_KEY=changeme
+SIA_STORAGE_SECRET_KEY=changeme
+SIA_STORAGE_BUCKET=hephaestus
+
+# --- Postgres ---
+POSTGRES_USER=forgejo
+POSTGRES_PASSWORD=changeme-strong-random
+POSTGRES_DB=forgejo
+
+# --- Forgejo ---
+FORGEJO_DOMAIN=localhost
+FORGEJO_ROOT_URL=http://localhost:3000/
+FORGEJO_SECRET_KEY=changeme-openssl-rand-hex-32
+FORGEJO_INTERNAL_TOKEN=changeme-openssl-rand-hex-32
+FORGEJO_OAUTH_JWT_SECRET=changeme-openssl-rand-base64-32
+
+# --- Auth proxy ---
+AUTH_PROXY_ISSUER=http://localhost:4000
+AUTH_PROXY_CLIENT_ID=forgejo
+AUTH_PROXY_CLIENT_SECRET=changeme-openssl-rand-hex-32
+AUTH_PROXY_CHALLENGE_DOMAIN=hephaestus.silentmode.st