Index: .env.example
===================================================================
--- .env.example	(revision f574435e514e088f63bb5fa1595059f929339456)
+++ .env.example	(revision 96c714f68f23cf079e786ef6c33248d540533ab2)
@@ -15,4 +15,9 @@
 # so a database dump alone stays useless). Or set your own: openssl rand -base64 32
 PAID_SECRET=
+# Web-push (notificaties) VAPID keys. Leave EMPTY to auto-generate on first use
+# (saved to storage/.vapid). Do NOT rotate: new keys break every subscription.
+VAPID_PUBLIC_KEY=
+VAPID_PRIVATE_KEY=
+VAPID_SUBJECT=
 DATABASE_PATH=./storage/database.sqlite
 MEDIA_PATH=./storage/media