diff --git a/deploy/.env.example b/deploy/.env.example
index 5250363..5cdc835 100644
--- a/deploy/.env.example
+++ b/deploy/.env.example
@@ -10,21 +10,20 @@ IMAGE_TAG=latest
 # ─── Required: API Keys ────────────────────────────────────────────────────────
 # LLM provider API key (Ark / Doubao / OpenAI-compatible)
 LLM_API_KEY=your-llm-api-key-here
-
 # Embedding + reranker API key (SiliconFlow)
 SILICONFLOW_API_KEY=your-siliconflow-api-key-here
 
 # ─── Required: Security ───────────────────────────────────────────────────────
 # JWT signing secret — use a strong random string in production
 # Generate: openssl rand -hex 32
-JWT_SECRET=change-me-in-production
-OPS_JWT_SECRET=change-me-in-production
-OPS_DEFAULT_ADMIN_PASSWORD=change-me-before-first-start
-SCHEDULER_INTERNAL_METRICS_TOKEN=change-me-scheduler-metrics-token
+JWT_SECRET=geo-web-Aa123456-change-me-in-production
+OPS_JWT_SECRET=geo-ops-Aa123456-change-me-in-production
+OPS_DEFAULT_ADMIN_PASSWORD=Aa123456
+SCHEDULER_INTERNAL_METRICS_TOKEN=geo-scheduler-Aa123456-change-me-in-production
 
 # ─── Optional: MinIO credentials ─────────────────────────────────────────────
-MINIO_ROOT_USER=minioadmin
-MINIO_ROOT_PASSWORD=minioadmin
+MINIO_ROOT_USER=admin
+MINIO_ROOT_PASSWORD=Aa123456
 
 # ─── Optional: Exposed ports ─────────────────────────────────────────────────
 # Defaults avoid common NAS ports such as 80, 8080, and 8090.