diff --git a/.env.example b/.env.example
index 52cfbfa..5c3cd4f 100644
--- a/.env.example
+++ b/.env.example
@@ -1,11 +1,12 @@
 # Flask
-FLASK_ENV=development
-FLASK_DEBUG=1
-SECRET_KEY=change-me-in-production
-INTERNAL_ADMIN_EMAILS=admin@example.com
+FLASK_ENV=production
+FLASK_DEBUG=0
+SECRET_KEY=replace-with-a-long-random-secret-key
+INTERNAL_ADMIN_EMAILS=admin@dociva.io
 
 # Site Domain (used in sitemap, robots.txt, emails)
 SITE_DOMAIN=https://dociva.io
+FRONTEND_URL=https://dociva.io
 
 # Redis
 REDIS_URL=redis://redis:6379/0
@@ -33,7 +34,15 @@ FILE_EXPIRY_SECONDS=1800
 DATABASE_PATH=/app/data/dociva.db
 
 # CORS
-CORS_ORIGINS=http://localhost:5173,http://localhost:3000
+CORS_ORIGINS=https://dociva.io,https://www.dociva.io
+
+# SMTP (Password reset + contact notifications)
+SMTP_HOST=smtp.your-provider.com
+SMTP_PORT=587
+SMTP_USER=noreply@dociva.io
+SMTP_PASSWORD=replace-with-smtp-password
+SMTP_FROM=noreply@dociva.io
+SMTP_USE_TLS=true
 
 # Stripe Payments
 STRIPE_SECRET_KEY=sk_test_XXXXXXXXXXXXXXXXXXXXXXXX
@@ -43,7 +52,7 @@ STRIPE_PRICE_ID_PRO_YEARLY=price_XXXXXXXXXXXXXXXX
 
 # Sentry Error Monitoring
 SENTRY_DSN=
-SENTRY_ENVIRONMENT=development
+SENTRY_ENVIRONMENT=production
 
 # PostgreSQL (production) — leave empty to use SQLite
 DATABASE_URL=
@@ -54,7 +63,7 @@ VITE_SENTRY_DSN=
 
 # Frontend Analytics / Ads (Vite)
 VITE_GA_MEASUREMENT_ID=G-XXXXXXXXXX
-VITE_PLAUSIBLE_DOMAIN=
+VITE_PLAUSIBLE_DOMAIN=dociva.io
 VITE_PLAUSIBLE_SRC=https://plausible.io/js/script.js
 VITE_GOOGLE_SITE_VERIFICATION=
 VITE_ADSENSE_CLIENT_ID=ca-pub-XXXXXXXXXXXXXXXX
diff --git a/frontend/.env.example b/frontend/.env.example
index 7f1ac2d..8c984d4 100644
--- a/frontend/.env.example
+++ b/frontend/.env.example
@@ -1,7 +1,7 @@
 VITE_SITE_DOMAIN=https://dociva.io
 VITE_SENTRY_DSN=
 VITE_GA_MEASUREMENT_ID=G-XXXXXXXXXX
-VITE_PLAUSIBLE_DOMAIN=
+VITE_PLAUSIBLE_DOMAIN=dociva.io
 VITE_PLAUSIBLE_SRC=https://plausible.io/js/script.js
 VITE_GOOGLE_SITE_VERIFICATION=
 VITE_ADSENSE_CLIENT_ID=ca-pub-XXXXXXXXXXXXXXXX