diff --git a/4600Pro/BookOrbit/.env b/4600Pro/BookOrbit/.env
index 3ddf43d..e9a92ce 100644
--- a/4600Pro/BookOrbit/.env
+++ b/4600Pro/BookOrbit/.env
@@ -22,16 +22,16 @@ PGID=1000
 
 # Database credentials
 POSTGRES_USER=bookorbit
-POSTGRES_PASSWORD=change-this-password
+POSTGRES_PASSWORD=nxY7HUoJYjUgn
 POSTGRES_DB=bookorbit
 
 # App secrets
-JWT_SECRET=change-this-to-a-long-random-secret
+JWT_SECRET=5c1c59712f970672a6cb09fd6e8823f44e024cd8633e11bdae5e616c743d3371
 # Fresh installs should generate an independent key with: openssl rand -hex 32
 # Existing installs upgrading from an older release must initially copy their current JWT_SECRET here so existing podcast URLs remain readable.
-PODCAST_ENCRYPTION_KEY=change-this-to-a-different-long-random-secret
+PODCAST_ENCRYPTION_KEY=5c1c59712f970672a6cb09fd6e8823f44e024cd8633e11bdae5e616c743d3371
 # Required for the initial /auth/setup endpoint (x-setup-token header)
-SETUP_BOOTSTRAP_TOKEN=change-this-to-a-long-random-secret
+SETUP_BOOTSTRAP_TOKEN=5c1c59712f970672a6cb09fd6e8823f44e024cd8633e11bdae5e616c743d3371
 
 # Sensitive values can instead be read from mounted files by appending _FILE.
 # Leave the direct value blank, then set its _FILE variable to the container path.