diff --git a/security/security.env b/security/security.env
new file mode 100644
index 0000000..5f7a38e
--- /dev/null
+++ b/security/security.env
@@ -0,0 +1,5 @@
+# Security (CrowdSec) - Pattern B env (folder-mode)
+CROWDSEC_PGDSN='postgres://CrowdSec:***REDACTED***@db:5432/crowdsec?sslmode=disable'
+BOUNCER_KEY_TRAEFIK=***REDACTED***
+CROWDSEC_API_KEY=***REDACTED***
+CROWDSEC_PASSWORD=***REDACTED***