diff --git a/.gitignore b/.gitignore
index e8f3fee..86779fc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ __pycache__/
 node_modules/
 dist/
 *.db
+atc.env
diff --git a/config/command-center/atc.env.example b/config/command-center/atc.env.example
new file mode 100644
index 0000000..2b16e59
--- /dev/null
+++ b/config/command-center/atc.env.example
@@ -0,0 +1,18 @@
+# Copy to atc.env and fill in secrets:
+#   cp config/command-center/atc.env.example /opt/atc-agents/atc.env
+
+S3_ENDPOINT=http://10.0.20.111:9020
+S3_ACCESS_KEY=object_admin1
+S3_SECRET_KEY=your-ecs-s3-secret-key
+S3_REGION=us-east-1
+
+JUPYTER_TOKEN=choose-a-strong-token
+
+GPU_URL=http://10.0.20.106:9000
+LLM_URL=http://10.0.20.106:8001/v1
+LLM_MODEL=gpt-4o
+LLM_API_KEY=sk-local
+
+LAKEHOUSE_HOST=10.0.21.50
+AIRFLOW_URL=http://10.0.21.55:8080
+KAFKA_UI_URL=http://10.0.21.36:9000
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index a75b0f2..59e8af6 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -1,7 +1,13 @@
 #!/bin/bash
-# Deploy Command Center stack on VM304
 set -euo pipefail
 cd "$(dirname "$0")/.."
-[ -f .env ] || { echo "Create .env from config/command-center/.env.example"; exit 1; }
-docker compose --env-file .env up -d --build
+if [ ! -f atc.env ]; then
+  echo "Missing atc.env — copy from config/command-center/atc.env.example"
+  cp config/command-center/atc.env.example atc.env
+  echo "Edit atc.env then re-run ./scripts/deploy.sh"
+  exit 1
+fi
+ln -sf "$(pwd)/atc.env" .env
+docker compose --env-file atc.env up -d --build
 echo "OK — http://10.0.21.33/"
+echo "Env file: $(pwd)/atc.env"