diff --git a/.env.docker.example b/.env.docker.example
new file mode 100644
index 00000000..1f6944f0
--- /dev/null
+++ b/.env.docker.example
@@ -0,0 +1,8 @@
+NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key
+SUPABASE_SERVICE_ROLE_KEY=your-service-role-key
+NEXT_PUBLIC_APP_URL=https://your-domain.com
+CRON_SECRET=generate-a-random-secret
+
+# Self-hosted (Docker) flag: disables application-side MFA enforcement.
+NEXT_PUBLIC_SELF_HOSTED=true
diff --git a/.gitignore b/.gitignore
index 0ca5f4ec..af8b4398 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,6 +34,7 @@ yarn-error.log*
 # env files (can opt-in for committing if needed)
 .env*
 !.env.example
+!.env.docker.example
 
 # vercel
 .vercel