diff --git a/apps/arcane/.env b/apps/arcane/.env
index a005218..9c103b6 100644
--- a/apps/arcane/.env
+++ b/apps/arcane/.env
@@ -1,6 +1,9 @@
-# Generate a secret using the following command:
+# The following variables are required to run Arcane. Use the commands provided to generate secure values.
+# openssl rand -hex 32
+ARCANE_ENCRYPTION_KEY=
 # echo "$(openssl rand -base64 64 | tr -d '=/' | tr -d '\n')"
-PUBLIC_SESSION_SECRET=
+ARCANE_JWT_SECRET=
 
-# On first run, Arcane creates a default admin user if no users exist.
-# Default Username/Password : arcane/arcane-admin
+# The default credentials when you first start Arcane are as follows:
+# Username: arcane
+# Password: arcane-admin
diff --git a/apps/arcane/compose.yaml b/apps/arcane/compose.yaml
index 51f4fd7..f911ac7 100644
--- a/apps/arcane/compose.yaml
+++ b/apps/arcane/compose.yaml
@@ -4,18 +4,20 @@ services:
     container_name: arcane
     restart: unless-stopped
     expose:
-      - 3000
+      - 3552
     environment:
-      - APP_ENV=production
       - PUID=${PUID}
       - PGID=${PGID}
-      - PUBLIC_SESSION_SECRET=${PUBLIC_SESSION_SECRET?}
+      - APP_URL=https://${ARCANE_HOSTNAME}
+      - ENCRYPTION_KEY=${ARCANE_ENCRYPTION_KEY}
+      - JWT_SECRET=${ARCANE_JWT_SECRET}
+      - DATABASE_URL=file:/app/data/arcane.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.arcane.rule=Host(`${ARCANE_HOSTNAME?}`)"
       - "traefik.http.routers.arcane.entrypoints=websecure"
       - "traefik.http.routers.arcane.tls.certresolver=letsencrypt"
-      - "traefik.http.services.arcane.loadbalancer.server.port=3000"
+      - "traefik.http.services.arcane.loadbalancer.server.port=3552"
       - "traefik.http.routers.arcane.middlewares=authelia@docker"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock