diff --git a/app/config.py b/app/config.py
index 70d8607b..56bb6e4b 100644
--- a/app/config.py
+++ b/app/config.py
@@ -358,3 +358,6 @@ PGP_SIGNER = os.environ.get("PGP_SIGNER")
 
 # emails that have empty From address is sent from this special reverse-alias
 NOREPLY = os.environ.get("NOREPLY", f"noreply@{EMAIL_DOMAIN}")
+
+COINBASE_WEBHOOK_SECRET = os.environ.get("COINBASE_WEBHOOK_SECRET")
+COINBASE_CHECKOUT_ID = os.environ.get("COINBASE_CHECKOUT_ID")
diff --git a/example.env b/example.env
index 9daba1c7..30a196a1 100644
--- a/example.env
+++ b/example.env
@@ -165,4 +165,8 @@ DISABLE_ONBOARDING=true
 # SPAMASSASSIN_HOST = 127.0.0.1
 
 # if set, used to sign the forwarding emails
-# PGP_SENDER_PRIVATE_KEY_PATH=local_data/private-pgp.asc
\ No newline at end of file
+# PGP_SENDER_PRIVATE_KEY_PATH=local_data/private-pgp.asc
+
+# Coinbase
+# COINBASE_WEBHOOK_SECRET=to_fill
+# COINBASE_CHECKOUT_ID=to_fill
\ No newline at end of file