# In Portainer, set DB_PASSWORD as a stack environment variable (do NOT commit .env). DB_PASSWORD=change-me-strong