diff --git a/config/users.yml b/config/users.yml
new file mode 100644
index 0000000..3e9109a
--- /dev/null
+++ b/config/users.yml
@@ -0,0 +1,94 @@
+---
+# ~/docker/authelia/config/users.yml
+#
+# All users start with the same temporary password.
+# Generate the hash once:
+#   docker run --rm authelia/authelia:latest authelia crypto hash generate argon2 --password 'TempPass2026!'
+#
+# Tell users to click "Forgot Password" on first login to set their own password.
+# Authelia will email them a reset link via Brevo.
+#
+# To add a user later, copy any block below, update name/email, use the same hash.
+# Then restart Authelia: docker compose restart authelia
+
+users:
+
+  # ── Admin ──────────────────────────────────────────────────────────────────
+  admin:
+    displayname: "Admin"
+    password=[REDACTED]
+    email: admin@yourdomain.com
+    groups:
+      - admins
+      - users
+
+  # ── Users (copy block for each, only change username/displayname/email) ────
+  user1:
+    displayname: "First Last"
+    email: user1@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user2:
+    displayname: "First Last"
+    email: user2@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user3:
+    displayname: "First Last"
+    email: user3@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user4:
+    displayname: "First Last"
+    email: user4@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user5:
+    displayname: "First Last"
+    email: user5@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user6:
+    displayname: "First Last"
+    email: user6@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user7:
+    displayname: "First Last"
+    email: user7@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user8:
+    displayname: "First Last"
+    email: user8@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user9:
+    displayname: "First Last"
+    email: user9@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users
+
+  user10:
+    displayname: "First Last"
+    email: user10@yourdomain.com
+    password=[REDACTED]
+    groups:
+      - users