diff --git a/.env.coolify.example b/.env.coolify.example
index 2906b14..9f45256 100644
--- a/.env.coolify.example
+++ b/.env.coolify.example
@@ -26,6 +26,8 @@ MINIO_ROOT_PASSWORD=CHANGE_ME_minio_password
 # AUTH_URL: exakt die Coolify-Domain des app-Service (http:// für intern)
 AUTH_SECRET=CHANGE_ME_openssl_rand_base64_32
 AUTH_URL=http://REPLACE-WITH-COOLIFY-SSLIP-DOMAIN
+# Hinter Reverse-Proxy (Coolify/Traefik) für Auth.js v5 zwingend, sonst UntrustedHost:
+AUTH_TRUST_HOST=true
 
 # --- KI-Provider (optional, aktuell ungenutzt) ---
 AI_PROVIDER=anthropic