diff --git a/.gitea/workflows/deploy-dev.yml b/.gitea/workflows/deploy-dev.yml
index 6856893..7b19100 100644
--- a/.gitea/workflows/deploy-dev.yml
+++ b/.gitea/workflows/deploy-dev.yml
@@ -24,8 +24,14 @@ jobs:
             git reset --hard origin/develop
           fi
           if [ ! -f .env ]; then
-            cp .env.example .env
-            echo "created .env from .env.example"
+            cat > .env <<'EOF'
+DB_NAME=buyingagent_dev
+DB_USER=buyingagent_dev
+DB_PASSWORD=dev_password_change_me
+ENVIRONMENT=development
+BUYING_AGENT_API_PORT=8095
+EOF
+            echo "created development .env"
           fi
           if grep -q '^BUYING_AGENT_API_PORT=' .env; then
             sed -i 's/^BUYING_AGENT_API_PORT=.*/BUYING_AGENT_API_PORT=8095/' .env
diff --git a/.gitea/workflows/deploy-prod.yml b/.gitea/workflows/deploy-prod.yml
index 5609f62..3cc0d98 100644
--- a/.gitea/workflows/deploy-prod.yml
+++ b/.gitea/workflows/deploy-prod.yml
@@ -24,8 +24,15 @@ jobs:
             git reset --hard origin/main
           fi
           if [ ! -f .env ]; then
-            cp .env.example .env
-            echo "created .env from .env.example — set a unique DB_PASSWORD for production"
+            cat > .env <<'EOF'
+DB_NAME=buyingagent
+DB_USER=buyingagent
+DB_PASSWORD=change_me
+ENVIRONMENT=production
+BUYING_AGENT_API_BIND=0.0.0.0
+BUYING_AGENT_API_PORT=8006
+EOF
+            echo "created production .env — set a unique DB_PASSWORD after first start"
           fi
           if grep -q '^BUYING_AGENT_API_BIND=' .env; then
             sed -i 's/^BUYING_AGENT_API_BIND=.*/BUYING_AGENT_API_BIND=0.0.0.0/' .env