Index: .env.example
===================================================================
--- .env.example	(revision 81bb9c588cda25bc4e200a46e001bf780d57c10f)
+++ .env.example	(revision f574435e514e088f63bb5fa1595059f929339456)
@@ -11,4 +11,8 @@
 # restarts/updates). Or set your own: openssl rand -hex 32
 SESSION_SECRET=
+# Encrypts the stored Patreon secrets for paid posts. Same deal: leave EMPTY to
+# auto-generate on first use (saved to storage/.paid-secret, kept outside the DB
+# so a database dump alone stays useless). Or set your own: openssl rand -base64 32
+PAID_SECRET=
 DATABASE_PATH=./storage/database.sqlite
 MEDIA_PATH=./storage/media
@@ -52,6 +56,6 @@
 # The core app, all updates and Cirkels are free. A handful of extras
 # (newsletter, statistics, EPK, link-in-bio, embeddable player, show agenda,
-# release planning, download-for-email) are unlocked by a one-time Patreon
-# supporter link — that's what funds the project:
+# release planning, download-for-email, paid posts) are unlocked by a one-time
+# Patreon supporter link — that's what funds the project:
 # klonkt.com / patreon.com/c/roboburr. Leave this on.
 KLONKT_PREMIUM_ENABLED=on