diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..252f18c
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,8 @@
+DB_HOST=127.0.0.1
+DB_PORT=3307
+DB_NAME=darkwatch
+DB_USER=darkwatch
+DB_PASSWORD=darkwatch_dev
+DB_ROOT_PASSWORD=rootpassword_dev
+JWT_SECRET=change_me_in_production
+CLIENT_URL=http://localhost:5173
diff --git a/.gitignore b/.gitignore
index e70fb04..88a966e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,5 @@ node_modules/
 server/data/
 .superpowers/
 .worktrees/
+server/.env
+*.db
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..36d9292
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,18 @@
+name: darkwatch
+services:
+  darkwatch-maria:
+    image: mariadb:11
+    container_name: darkwatch-maria
+    restart: unless-stopped
+    volumes:
+      - darkwatch-mariadb-data:/var/lib/mysql
+    ports:
+      - "3307:3306"
+    environment:
+      MARIADB_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
+      MARIADB_DATABASE: ${DB_NAME}
+      MARIADB_USER: ${DB_USER}
+      MARIADB_PASSWORD: ${DB_PASSWORD}
+
+volumes:
+  darkwatch-mariadb-data: