diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..79d5e18
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,17 @@
+# Copy this to .env and fill in your values.
+# docker-compose automatically loads .env from the same directory.
+
+# Tailscale reusable auth key — generate at:
+# https://login.tailscale.com/admin/settings/keys
+TS_AUTHKEY=tskey-auth-xxxxxxxxxxxxxxxx
+
+# Name that appears on your tailnet
+TS_HOSTNAME=moonrelay
+
+# Set to 1 to run without Tailscale (LAN-only)
+MOONRELAY_NO_TS=0
+
+# Web UI port (must match docker-compose ports mapping)
+MOONRELAY_PORT=8080
+
+TZ=America/New_York