diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..c53106d
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,16 @@
+# Copy to .env (loaded by your process manager) or export before `npm start`.
+# Newbury Nights configuration
+
+# Port the Node/Express app listens on (nginx terminates HTTPS in front of this).
+PORT=3000
+
+# Secret used to sign JWTs. CHANGE THIS to a long random string in production.
+JWT_SECRET=change-me-to-a-long-random-string
+
+# Admin bootstrap credentials. On first `npm run seed`, an admin user is created
+# with these values if no admin exists yet. Change the password after first login.
+ADMIN_USER=admin
+ADMIN_PASS=changeme
+
+# Where uploaded ghost GIFs/images are stored (relative to project root).
+UPLOAD_DIR=uploads