diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..aa69cd2
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,17 @@
+# Secrets and URLs only — everything else goes in config.json
+# See config.example.json for the full list of configurable defaults.
+
+# Cloud API key (required for --cloud / --research)
+NOXA_API_KEY=
+
+# Single proxy URL (or use NOXA_PROXY_FILE for pool rotation)
+NOXA_PROXY=
+
+# Webhook URL for completion notifications
+NOXA_WEBHOOK_URL=
+
+# LLM base URL (Ollama or OpenAI-compatible endpoint)
+NOXA_LLM_BASE_URL=
+
+# Optional: path to a non-default config file (default: ./config.json)
+# NOXA_CONFIG=/path/to/my-config.json