diff --git a/paperless/.env b/paperless/.env
new file mode 100644
index 0000000..9ae5fe8
--- /dev/null
+++ b/paperless/.env
@@ -0,0 +1,45 @@
+# --- Security Settings ---
+PAPERLESS_SECRET_KEY=YOUR_VERY_LONG_RANDOM_SECRET_KEY_HERE # Generate with `openssl rand -hex 32` or similar
+PAPERLESS_ADMIN_USER=youradmin
+PAPERLESS_ADMIN_PASSWORD=your_strong_admin_password
+PAPERLESS_URL=http://your-paperless-domain.com # Or your server's IP if not using a domain
+PAPERLESS_ALLOWED_HOSTS=localhost,your-server-ip,your-paperless-domain.com
+PAPERLESS_CSRF_TRUSTED_ORIGINS=http://your-paperless-domain.com
+
+# --- Database Settings (PostgreSQL) ---
+PAPERLESS_DBHOST=db
+PAPERLESS_DBENGINE=postgresql
+PAPERLESS_DBNAME=paperless
+PAPERLESS_DBUSER=paperless
+PAPERLESS_DBPASS=your_strong_db_password
+
+# --- Redis Settings ---
+PAPERLESS_REDIS=redis://broker:6379
+
+# --- User Mapping (Important for file permissions) ---
+# Find your user's UID and GID on the host system with `id -u` and `id -g`
+USERMAP_UID=1000 # Replace with your user's UID
+USERMAP_GID=1000 # Replace with your user's GID
+
+# --- General Settings ---
+PAPERLESS_TIME_ZONE=Europe/Berlin # Change to your timezone (e.g., America/New_York)
+PAPERLESS_OCR_LANGUAGE=eng # Default OCR language (e.g., eng, deu, fra, spa, ita). Separate multiple with '+' (e.g., eng+deu)
+PAPERLESS_OCR_LANGUAGES=eng,deu # Languages to download for OCR
+
+# --- Volume Paths (Optional - leave commented for Docker named volumes as fallback) ---
+# If uncommented, these will use bind mounts to the specified host path.
+# PAPERLESS_DATA_PATH=/opt/paperless-ngx/data
+# PAPERLESS_MEDIA_PATH=/opt/paperless-ngx/media
+# PAPERLESS_PGDATA_PATH=/opt/paperless-ngx/pgdata
+# PAPERLESS_REDISDATA_PATH=/opt/paperless-ngx/redisdata
+# PAPERLESS_CONSUME_PATH=/opt/paperless-ngx/consume
+# PAPERLESS_EXPORT_PATH=/opt/paperless-ngx/export
+
+# --- Optional: Email Consumption ---
+# PAPERLESS_CONSUMPTION_MAIL_HOST=imap.example.com
+# PAPERLESS_CONSUMPTION_MAIL_PORT=993
+# PAPERLESS_CONSUMPTION_MAIL_USER=your_email@example.com
+# PAPERLESS_CONSUMPTION_MAIL_PASS=your_email_password
+# PAPERLESS_CONSUMPTION_MAIL_SSL=True
+# PAPERLESS_CONSUMPTION_MAIL_INBOX=INBOX
+# PAPERLESS_CONSUMPTION_MAIL_ACCOUNT=default # Optional: name the account
\ No newline at end of file