diff --git a/.env.example b/.env.example
index b99a182..fa35fec 100644
--- a/.env.example
+++ b/.env.example
@@ -21,3 +21,10 @@ IIOS_CRED_KEY=""
 # Orphaned-media garbage collection (uploaded-but-never-sent attachments).
 # Interval 0 = off; set e.g. 3600000 (hourly) in prod. Grace defaults to 24h.
 IIOS_MEDIA_GC_INTERVAL_MS=0
+
+# Web Push (VAPID) for offline notifications. Unset VAPID_PUBLIC_KEY → push is disabled
+# (subscribe endpoint still stores subs, but WebPushDelivery returns 'failed' — no sends).
+# Generate a keypair with: npx web-push generate-vapid-keys
+VAPID_PUBLIC_KEY=""
+VAPID_PRIVATE_KEY=""
+VAPID_SUBJECT="mailto:dev@insignia"