diff --git a/docker/.env.example b/docker/.env.example
index 438e97941..25538e579 100644
--- a/docker/.env.example
+++ b/docker/.env.example
@@ -38,6 +38,29 @@ EMBEDDING_MODEL=sentence-transformers/all-MiniLM-L6-v2
 # FRONTEND_PORT=3000
 # ELECTRIC_PORT=5133
 # FLOWER_PORT=5555
+# REDIS_PORT=6379
+
+# ------------------------------------------------------------------------------
+# pgAdmin (dev compose only — docker-compose.dev.yml)
+# ------------------------------------------------------------------------------
+# PGADMIN_PORT=5050
+# PGADMIN_DEFAULT_EMAIL=admin@surfsense.com
+# PGADMIN_DEFAULT_PASSWORD=surfsense
+
+# ------------------------------------------------------------------------------
+# Frontend Build Args (dev compose only — docker-compose.dev.yml)
+# ------------------------------------------------------------------------------
+# In dev, the frontend is built from source and these are passed as build args.
+# In prod, they are derived from AUTH_TYPE, ETL_SERVICE, and the port settings.
+
+# NEXT_PUBLIC_FASTAPI_BACKEND_AUTH_TYPE=LOCAL
+# NEXT_PUBLIC_ETL_SERVICE=DOCLING
+
+# Deployment mode (self-hosted or cloud)
+# NEXT_PUBLIC_DEPLOYMENT_MODE=self-hosted
+
+# Electric auth mode (insecure or secure)
+# NEXT_PUBLIC_ELECTRIC_AUTH_MODE=insecure
 
 # ------------------------------------------------------------------------------
 # Custom Domain / Reverse Proxy