diff --git a/.env.example b/.env.example
index 78698a34f..2f39edac0 100644
--- a/.env.example
+++ b/.env.example
@@ -220,3 +220,10 @@ API_TOKEN_HMAC_KEY="REPLACE-WITH-OUTPUT-OF-openssl-rand-hex-32"
 # Generate with `openssl rand -hex 32`. Configure the SAME value in Coolify's
 # Notifications → Webhook custom-headers panel. See docs/audit/v1415-auto-deploy.md.
 # DEPLOY_WEBHOOK_SECRET=""
+
+
+# -----------------------------------------------------------------------------
+# IP geolocation (optional)
+# -----------------------------------------------------------------------------
+# Opt-in for a plain-HTTP IP_GEO_LOOKUP_URL provider (e.g. free ip-api.com); off by default — looked-up IPs then travel unencrypted over your server's egress.
+# IP_GEO_ALLOW_INSECURE="true"