- .env.example documents all env vars with defaults (postgres creds, DATABASE_URL, TTLs, pool sizes) - compose.yml reads postgres credentials and app config from .env via env_file - .gitignore: track .env.example, ignore .env