diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..2fbeb51
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,28 @@
+NODE_ENV=development
+
+# Public app URL
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# Better Auth
+BETTER_AUTH_URL=http://localhost:3000
+BETTER_AUTH_SECRET=change-me-in-prod
+
+# Convex (dev server URL)
+NEXT_PUBLIC_CONVEX_URL=http://127.0.0.1:3210
+
+# SQLite database (local dev)
+DATABASE_URL=file:./prisma/db.dev.sqlite
+
+# Optional SMTP (dev)
+# SMTP_ADDRESS=localhost
+# SMTP_PORT=1025
+# SMTP_TLS=false
+# SMTP_USERNAME=
+# SMTP_PASSWORD=
+# SMTP_AUTHENTICATION=login
+# SMTP_ENABLE_STARTTLS_AUTO=false
+# MAILER_SENDER_EMAIL=no-reply@example.com
+
+# Dev-only bypass to simplify local testing (do NOT enable in prod)
+# DEV_BYPASS_AUTH=0
+# NEXT_PUBLIC_DEV_BYPASS_AUTH=0
diff --git a/.gitignore b/.gitignore
index fa788b6..ce5cb8e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,6 +36,10 @@ yarn-error.log*
 !.env.example
 !apps/desktop/.env.example
 
+# Accidental Windows duplicate downloads (e.g., "env (1)")
+env (*)
+env (1)
+
 # vercel
 .vercel
 
diff --git a/env (1) b/env (1)
deleted file mode 100644
index 8b2fee3..0000000
--- a/env (1)	
+++ /dev/null
@@ -1,47 +0,0 @@
-# Configurações locais padrão
-
-NEXT_PUBLIC_CONVEX_URL=https://convex.esdrasrenan.com.br
-BETTER_AUTH_SECRET=44bf2b9f97b94d0ea68b4518eec0c565a9b5660fbd3f54ef958d36b2b2a2d4e3
-BETTER_AUTH_URL=https://tickets.esdrasrenan.com.br
-NEXT_PUBLIC_APP_URL=https://tickets.esdrasrenan.com.br
-DATABASE_URL=file:./prisma/db.sqlite
-CONVEX_SYNC_SECRET=dev-sync-secret
-SMTP_ADDRESS=smtp.hostinger.com
-SMTP_PORT=465
-SMTP_DOMAIN=esdrasrenan.com.br
-SMTP_USERNAME=chat@esdrasrenan.com.br
-SMTP_PASSWORD=5ffB7Ny4#@qA!0e19NG5
-SMTP_AUTHENTICATION=login
-SMTP_ENABLE_STARTTLS_AUTO=false
-SMTP_TLS=true
-MAILER_SENDER_EMAIL="Chatwoot chat@esdrasrenan.com.br (chat@esdrasrenan.com.br)"
-
-# ===== Adições para provisionamento/integrações =====
-# Segredo para provisionamento de máquinas (Convex)
-MACHINE_PROVISIONING_SECRET=71daa9ef54cb224547e378f8121ca898b614446c142a132f73c2221b4d53d7d6
-# TTL do token de máquina (ms) — 30 dias
-MACHINE_TOKEN_TTL_MS=2592000000
-# Opcional: segredo para webhook do FleetDM (senão usa o de provisionamento)
-FLEET_SYNC_SECRET=71daa9ef54cb224547e378f8121ca898b614446c142a132f73c2221b4d53d7d6
-
-# Hora local (America/Sao_Paulo) para rodar alertas automáticos (actions do Convex)
-ALERTS_LOCAL_HOUR=8
-
-# ===== Seeds/sync auxiliares =====
-SYNC_TENANT_ID=tenant-atlas
-SYNC_DEFAULT_ASSIGNEE=agent@example.com
-SEED_TENANT_ID=tenant-atlas
-SEED_ADMIN_PASSWORD=admin123
-SEED_AGENT_PASSWORD=agent123
-SEED_USER_TENANT=tenant-atlas
-SEED_USER_EMAIL=
-SEED_USER_PASSWORD=
-SEED_USER_NAME=
-SEED_USER_ROLE=admin
-
-# ===== Desenvolvimento Desktop =====
-# IP do host para HMR quando rodar `pnpm --filter appsdesktop tauri dev`
-TAURI_DEV_HOST=
-
-VITE_APP_URL=https://tickets.esdrasrenan.com.br
-VITE_API_BASE_URL=https://tickets.esdrasrenan.com.br