diff --git a/authelia/.env.example b/authelia/.env.example
index 129c1b9..d09796b 100644
--- a/authelia/.env.example
+++ b/authelia/.env.example
@@ -4,3 +4,8 @@
 AUTHELIA_JWT_SECRET=
 AUTHELIA_SESSION_SECRET=
 AUTHELIA_STORAGE_ENCRYPTION_KEY=
+
+# OIDC client secrets — generate with: openssl rand -hex 32
+AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET=
+AUTHELIA_OIDC_CLIENT_SECRET_LINKDING=
+AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI=
diff --git a/ollama/.env.example b/ollama/.env.example
new file mode 100644
index 0000000..85898b5
--- /dev/null
+++ b/ollama/.env.example
@@ -0,0 +1,2 @@
+# Open WebUI OIDC — must match AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI in Authelia stack
+AUTHELIA_OIDC_CLIENT_SECRET_OPEN_WEBUI=