diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..1f45a2e
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,18 @@
+# Copy to .env and fill in real values:  cp .env.example .env
+# .env is gitignored/dockerignored — never commit real secrets.
+
+# --- Local Postgres (used by the db service and the app's datasource) ---
+POSTGRES_DB=homme
+POSTGRES_USER=homme
+# Also used as spring.datasource.password. Pick any local value.
+DB_PASSWORD=change-me-local
+
+# --- Azure AI Foundry keys ---
+OPENAI_API_MISTRAL_KEY=
+AZURE_EMBEDDING_KEY=
+
+# --- cloud.humbee.de ingestion login ---
+HUMBEE_PASSWORD=
+
+# Optional extra JVM flags (e.g. -Xmx512m)
+JAVA_TOOL_OPTIONS=
diff --git a/db/init/01-extensions.sql b/db/init/01-extensions.sql
new file mode 100644
index 0000000..391a73b
--- /dev/null
+++ b/db/init/01-extensions.sql
@@ -0,0 +1,3 @@
+-- Runs automatically the first time the DB volume is created.
+-- Enables pgvector so Hibernate can map the vector(1536) embedding column.
+CREATE EXTENSION IF NOT EXISTS vector;
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..4b382e7
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,15 @@
+services:
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: homme-app
+    restart: unless-stopped
+    ports:
+      - "9192:9192"
+    environment:
+      - DB_PASSWORD=Neu2026!
+      - HUMBEE_PASSWORD=Neu2026!
+      - AZURE_EMBEDDING_KEY=7QT99mzRAZEYTH9aETqPfNZ15637VSpe6POp9y3C1gCGbhg85dMHJQQJ99CFACPV0roXJ3w3AAAAACOGvNH3
+      - OPENAI_API_MISTRAL_KEY=7QT99mzRAZEYTH9aETqPfNZ15637VSpe6POp9y3C1gCGbhg85dMHJQQJ99CFACPV0roXJ3w3AAAAACOGvNH3
+