diff --git a/.env.example b/.env.example
new file mode 100644
index 00000000..58f1c27b
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,35 @@
+# Public site identity
+NEXT_PUBLIC_SITE_DOMAIN=rockymountainvending.com
+NEXT_PUBLIC_SITE_URL=https://rockymountainvending.com
+
+# Shared Convex lead storage
+CONVEX_URL=http://backend-your-convex-service.example.com
+CONVEX_DEPLOY_ON_BUILD=false
+CONVEX_SELF_HOSTED_URL=http://backend-your-convex-service.example.com
+CONVEX_SELF_HOSTED_ADMIN_KEY=replace-with-instance-secret
+CONVEX_TENANT_SLUG=rocky_mountain_vending
+CONVEX_TENANT_NAME=Rocky Mountain Vending
+
+# Email delivery through Coolify-managed Usesend
+USESEND_API_KEY=
+USESEND_BASE_URL=
+USESEND_FROM_EMAIL=info@rockymountainvending.com
+CONTACT_FORM_TO_EMAIL=info@rockymountainvending.com
+
+# Optional SES fallback if Usesend is not ready yet
+AWS_ACCESS_KEY=
+AWS_SECRET_KEY=
+AWS_DEFAULT_REGION=us-east-1
+
+# GoHighLevel routing
+GHL_API_TOKEN=
+GHL_LOCATION_ID=YAoWLgNSid8oG44j9BjG
+
+# Optional admin/test route gating
+ADMIN_UI_ENABLED=false
+ADMIN_API_TOKEN=
+
+# Placeholder for a later LiveKit rollout
+LIVEKIT_URL=
+LIVEKIT_API_KEY=
+LIVEKIT_API_SECRET=
diff --git a/.gitignore b/.gitignore
index f650315f..0742840b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,10 +18,11 @@ yarn-error.log*
 
 # env files
 .env*
+!.env.example
 
 # vercel
 .vercel
 
 # typescript
 *.tsbuildinfo
-next-env.d.ts
\ No newline at end of file
+next-env.d.ts
diff --git a/Dockerfile b/Dockerfile
index b850c425..4c6979cf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,6 +11,7 @@ FROM node:20-alpine AS runner
 ENV NODE_ENV=production
 WORKDIR /app
 
+RUN apk add --no-cache curl
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs