diff --git a/cfg/.gitignore b/cfg/.gitignore
index 4e9fc9e..f6b5eda 100644
--- a/cfg/.gitignore
+++ b/cfg/.gitignore
@@ -1,6 +1,5 @@
 # Environment files with credentials (use .env.example as template)
 **/.env
-!sample/**/.env
 
 # Database dumps (sensitive data)
 **/dumps/*.sql
diff --git a/cfg/sample/.env.example b/cfg/sample/sample/.env.example
similarity index 100%
rename from cfg/sample/.env.example
rename to cfg/sample/sample/.env.example
diff --git a/cfg/sample/soleprint/.env b/cfg/sample/soleprint/.env
deleted file mode 100644
index a8f0313..0000000
--- a/cfg/sample/soleprint/.env
+++ /dev/null
@@ -1,32 +0,0 @@
-# =============================================================================
-# Sample Soleprint Configuration
-# =============================================================================
-
-# =============================================================================
-# DEPLOYMENT
-# =============================================================================
-DEPLOYMENT_NAME=sample_spr
-
-# =============================================================================
-# NETWORK
-# =============================================================================
-NETWORK_NAME=sample_network
-
-# =============================================================================
-# PORTS (unique per room)
-# =============================================================================
-SOLEPRINT_PORT=12030
-NGINX_PORT=8130
-
-# =============================================================================
-# GOOGLE OAUTH
-# =============================================================================
-GOOGLE_CLIENT_ID=1076380473867-k6gvdg8etujj2e51bqejve78ft99hnqd.apps.googleusercontent.com
-GOOGLE_CLIENT_SECRET=***REMOVED***
-GOOGLE_REDIRECT_URI=http://sample.spr.local.ar/artery/google/oauth/callback
-
-# =============================================================================
-# AUTH
-# =============================================================================
-AUTH_BYPASS=true
-AUTH_SESSION_SECRET=sample-dev-secret-change-in-production
diff --git a/cfg/sample/sample/.env b/cfg/sample/soleprint/.env.example
similarity index 52%
rename from cfg/sample/sample/.env
rename to cfg/sample/soleprint/.env.example
index db8c3e1..00aff29 100644
--- a/cfg/sample/sample/.env
+++ b/cfg/sample/soleprint/.env.example
@@ -1,21 +1,23 @@
 # =============================================================================
-# sample room — Managed App (Fixture Invoicing)
+# Sample Soleprint Configuration — copy to .env and fill in
 # =============================================================================
-# This room wraps examples/fixture-invoicing/ — a deliberate fixture, not a real app.
 
-DEPLOYMENT_NAME=sample
+DEPLOYMENT_NAME=sample_spr
 NETWORK_NAME=sample_network
 
-# =============================================================================
-# PORTS (host-exposed)
-# =============================================================================
-BACKEND_PORT=8120
-FRONTEND_PORT=3120
-DB_PORT=5532
+# Ports (unique per room)
+SOLEPRINT_PORT=12030
+NGINX_PORT=8130
 
 # =============================================================================
-# DATABASE (Postgres)
+# Google OAuth — get values from console.cloud.google.com
 # =============================================================================
-POSTGRES_DB=fixture
-POSTGRES_USER=postgres
-POSTGRES_PASSWORD=localdev123
+GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
+GOOGLE_CLIENT_SECRET=your-client-secret
+GOOGLE_REDIRECT_URI=http://sample.spr.local.ar/artery/google/oauth/callback
+
+# =============================================================================
+# Auth
+# =============================================================================
+AUTH_BYPASS=true
+AUTH_SESSION_SECRET=change-me-to-a-long-random-string