diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..5df85f3
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,5 @@
+# use this for production / hosting your own app
+
+DB_ROOT_PWD=""
+ACCESS_TOKEN_SECRET=""
+REFRESH_TOKEN_SECRET=""
\ No newline at end of file
diff --git a/docker-compose.yml b/docker-compose.yml
index ae99bfa..e82a01c 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,7 +4,7 @@ services:
   db:
     image: mysql
     environment:
-      MYSQL_ROOT_PASSWORD: ROOT_PWD
+      MYSQL_ROOT_PASSWORD: ${DB_ROOT_PWD}
       MYSQL_DATABASE: capture-the-feather
     ports:
       - "1459:3306"
@@ -19,9 +19,9 @@ services:
       - server
   server:
     environment:
-      CTF_DB_URL: "mysql://root:ROOT_PWD@db:3306/capture-the-feather"
-      ACCESS_TOKEN_SECRET: "LOLUWISH"
-      REFRESH_TOKEN_SECRET: "HAHALOLUWISH"
+      CTF_DB_URL: "mysql://root:${DB_ROOT_PWD}@db:3306/capture-the-feather"
+      ACCESS_TOKEN_SECRET: ${ACCESS_TOKEN_SECRET}
+      REFRESH_TOKEN_SECRET: ${REFRESH_TOKEN_SECRET}
     build:
       context: ./server
     ports:
diff --git a/server/.env.example b/server/.env.example
index e7ce655..3addde9 100644
--- a/server/.env.example
+++ b/server/.env.example
@@ -1,3 +1,5 @@
+# Use this for development purposes only
+
 CTF_DB_URL=""
 ACCESS_TOKEN_SECRET=""
 REFRESH_TOKEN_SECRET=""
\ No newline at end of file