diff --git a/dankclaw/.env.example b/dankclaw/.env.example
index b4612b0..efa5081 100644
--- a/dankclaw/.env.example
+++ b/dankclaw/.env.example
@@ -34,3 +34,8 @@ OPENAI_API_KEY=not-needed
 SIGNAL_ACCOUNT=+15551234567
 # Comma-separated E.164 numbers allowed to message the agent.
 SIGNAL_ALLOWED_USERS=+15551234567
+
+# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
+# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
+PORKBUN_API_KEY=changeme
+PORKBUN_API_SECRET=changeme
diff --git a/dankserver/.env.example b/dankserver/.env.example
index 6a6f4d1..30d0c98 100644
--- a/dankserver/.env.example
+++ b/dankserver/.env.example
@@ -22,3 +22,8 @@ JELLYFIN_PUBLISH_SERVER_URL=http://192.168.0.235:8096
 
 # *arr Stack
 ARR_TZ=America/New_York
+
+# Porkbun API (franksdank.cloud zone). Caddy uses these for DNS-01
+# Let's Encrypt wildcard cert issuance. Scope the token to this zone only.
+PORKBUN_API_KEY=changeme
+PORKBUN_API_SECRET=changeme