diff --git a/.env.example b/.env.example
index 1da8229..d37b879 100644
--- a/.env.example
+++ b/.env.example
@@ -1,6 +1,12 @@
-ORCHESTRA_SECRET_KEY=
-MUSICIAN_SECRET_KEY=
+# ORCHESTRA
+####
 
+#ORCHESTRA_SECRET_KEY='uncomment-it-and-fill-this'
+
+# MUSICIAN
+####
+
+#MUSICIAN_SECRET_KEY='uncomment-it-and-fill-this'
 # specially useful if you want to deploy in a specific domain
-#MUSICIAN_API_BASE_URL=https://orchestra.example.org
-#ALLOWED_HOSTS=musician.example.org
+#MUSICIAN_API_BASE_URL='https://orchestra.example.org'
+#MUSICIAN_ALLOWED_HOSTS='musician.example.org'
diff --git a/docker-compose.yml b/docker-compose.yml
index 7a9b856..c3d6fc4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,7 @@ services:
     init: true
     image: dkr-dsg.ac.upc.edu/trustchain-oc1-orchestral/orchestra:sso__533d749
     environment:
-      - SECRET_KEY=${ORCHESTRA_SECRET_KEY:-123456}
+      - SECRET_KEY=${ORCHESTRA_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
     ports:
       - "9080:9080"
     # TODO configure volumes
@@ -18,9 +18,9 @@ services:
     ports:
       - "8080:8080"
     environment:
-      - SECRET_KEY=${MUSICIAN_SECRET_KEY:-123456}
+      - SECRET_KEY=${MUSICIAN_SECRET_KEY:-publicsecretisnotsecureVtmKBfxpVV47PpBCF2Nzz2H6qnbd}
       - API_BASE_URL=${MUSICIAN_API_BASE_URL:-http://nginx-orchestra-api:3000}
-      - ALLOWED_HOSTS=${ALLOWED_HOSTS:-*}
+      - ALLOWED_HOSTS=${MUSICIAN_ALLOWED_HOSTS:-*}
     # TODO configure volumes
     #volumes:
     #  - .:/home