diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..5900586
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,2 @@
+B2_ACCOUNT_ID=
+B2_ACCOUNT_KEY=
diff --git a/.envrc b/.envrc
index 3550a30..3b11770 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1,2 @@
 use flake
+dotenv
diff --git a/services/restic/home-pc.nix b/services/restic/home-pc.nix
index 585cedf..5ee60ee 100644
--- a/services/restic/home-pc.nix
+++ b/services/restic/home-pc.nix
@@ -1,7 +1,7 @@
 { config, lib, pkgs, ... }:
 
 # using the restic cli:
-# load credentials into shell via: export $(cat /path/to/credentials/file | xargs)
+# load credentials into shell by adding B2 secrets to .env (see .env.example).
 # useful commands for analysing restic stats [snapshot-id], restic diff [s1] [s2],
 
 with lib;
diff --git a/services/restic/rpi4.nix b/services/restic/rpi4.nix
index da5800d..3d76732 100644
--- a/services/restic/rpi4.nix
+++ b/services/restic/rpi4.nix
@@ -1,7 +1,7 @@
 { config, lib, pkgs, ... }:
 
 # using the restic cli:
-# load credentials into shell via: export $(cat /path/to/credentials/file | xargs)
+# load credentials into shell by adding B2 secrets to .env (see .env.example).
 # useful commands for analysing restic stats [snapshot-id], restic diff [s1] [s2],
 
 with lib;