diff --git a/.env.sample b/.env.sample
index 1311d5c..5cf9799 100644
--- a/.env.sample
+++ b/.env.sample
@@ -6,3 +6,7 @@ DOMAIN=pgsql.example.com
 #EXTRA_DOMAINS=', `www.pgsql.example.com`'
 
 LETS_ENCRYPT_ENV=production
+
+# Secret management
+SECRET_PGUSER_VERSION=v1
+SECRET_PGPASSWORD_VERSION=v1