diff --git a/.env.example b/.env.example
index 1e7f1c6..c748769 100644
--- a/.env.example
+++ b/.env.example
@@ -26,4 +26,7 @@ S3_REGION=garage
 # --- Tool container images (verify before enabling profile "tools") ---
 IMAGE_GIMP=lscr.io/linuxserver/gimp:latest
 IMAGE_VIDEO=lscr.io/linuxserver/webtop:latest
-IMAGE_AUDIO=lscr.io/linuxserver/webtop:latestSC_TOKEN=change-me
+IMAGE_AUDIO=lscr.io/linuxserver/webtop:latest
+
+# ON/OFF service-controller token (host-side; real value injected at deploy)
+SC_TOKEN=change-me