diff --git a/mqtt/sec/.env b/mqtt/sec/.env
new file mode 100644
index 0000000..41fb93a
--- /dev/null
+++ b/mqtt/sec/.env
@@ -0,0 +1,20 @@
+# --- Container Settings ---
+CONTAINER_NAME=mosquitto
+TZ=Europe/Berlin
+
+# --- Connectivity & DNS ---
+# Use a valid DNS server (e.g., your router IP or Google DNS 8.8.8.8)
+DNS_SERVER=8.8.8.8
+MQTT_HOSTNAME=mqtt.local
+MQTT_TLS_PORT=8883
+
+# --- User Credentials ---
+# Note: The script generates a random password if the passwd file doesn't exist.
+MQTT_USER=mqttuser
+
+# --- Persistence Paths ---
+# These paths are relative to your docker-compose.yml file
+CONFIG_PATH=./config
+DATA_PATH=./data
+LOG_PATH=./log
+TLS_PATH=./tls
\ No newline at end of file