diff --git a/.env.example b/.env.example
index 9ff276aa..4d07131b 100644
--- a/.env.example
+++ b/.env.example
@@ -4,3 +4,13 @@ HATCH_HOSTNAME=hatch.example.com
 
 # Base URL for SSE and self-referencing links within the UI.
 HATCH_BASE_URL=https://hatch.example.com
+
+# AWS Rekognition Configuration (optional — set FACE_SERVICE_ENABLED=true to enable)
+FACE_SERVICE_ENABLED=false
+AWS_REGION=us-east-1
+REKOGNITION_COLLECTION=hatch-faces
+REKOGNITION_MAX_FACES=10
+REKOGNITION_THRESHOLD=80.0
+
+# Redis URL (optional — used for rate-limit backing store)
+REDIS_URL=
diff --git a/Dockerfile b/Dockerfile
index cb1a0795..a1000d2b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 
 # ---- build stage ----
-FROM golang:1.25-alpine AS build
+FROM golang:1.26-alpine AS build
 
 WORKDIR /src