diff --git a/.env.example b/.env.example
index fc774ee..bda36a0 100644
--- a/.env.example
+++ b/.env.example
@@ -5,9 +5,12 @@
 # which refers to these by name, e.g. `token: ${NISSE_LLM_TOKEN}`. The live
 # integration tests use the same names, from tests/integration/nisse-test.yaml.
 
-NISSE_LLM_TOKEN=sk-your-litellm-virtual-key
-NISSE_MATRIX_TOKEN=syt_your_matrix_access_token
-NISSE_GITEA_TOKEN=your-scoped-service-account-token
+# llm.token: the LiteLLM virtual key (A5)
+NISSE_LLM_TOKEN=replace-me
+# matrix.token: the Matrix access token for the agent's account (A1)
+NISSE_MATRIX_TOKEN=replace-me
+# gitea.token: the Gitea service account's scoped token (B2)
+NISSE_GITEA_TOKEN=replace-me
 
 # Where the config file is, if not ./nisse-dev.yaml. Where this file is, if
 # not ./.env, is NISSE_ENV, which has to be set in the real environment.