diff --git a/deploy/production.env.template b/deploy/production.env.template
index 28e8e67..d5bc9b2 100644
--- a/deploy/production.env.template
+++ b/deploy/production.env.template
@@ -6,6 +6,8 @@ JWT_SECRET=CHANGE_ME_RANDOM_32CHARS
 JWT_ACCESS_EXPIRE_MIN=60
 JWT_REFRESH_EXPIRE_H=168
 LICENSE_HMAC_SECRET=CHANGE_ME_RANDOM_32CHARS
+LICENSE_ED25519_PUBLIC_KEY=zFkRV0E+oMjHbixiBamf2ZAq+n7En2V7EJRIurgtVxo=
+LICENSE_ED25519_PRIVATE_KEY=CHANGE_ME_ED25519_PRIVATE_FROM_BITWARDEN
 STORAGE_UPLOAD_DIR=/opt/jiu/images
 STORAGE_BASE_URL=https://jiu.51yanmei.com/images
 STORAGE_PUBLIC_URL=https://jiu.51yanmei.com
diff --git a/deploy/render-env.sh b/deploy/render-env.sh
index 4094841..b7d5599 100755
--- a/deploy/render-env.sh
+++ b/deploy/render-env.sh
@@ -15,8 +15,8 @@ set -euo pipefail
 
 # ---- 可配置项 ----
 RBW="${RBW_BIN:-/opt/homebrew/bin/rbw}"
-BW_ITEM="${JIU_BW_ITEM:-DB_PASSWORD}"          # 存放 jiu 密钥字段的 Bitwarden 条目
-SECRET_KEYS="DATABASE_DSN JWT_SECRET LICENSE_HMAC_SECRET DB_PASSWORD"
+BW_ITEM="${JIU_BW_ITEM:-jiu db password}"      # 存放 jiu 密钥字段的 Bitwarden 条目
+SECRET_KEYS="DATABASE_DSN JWT_SECRET LICENSE_HMAC_SECRET LICENSE_ED25519_PRIVATE_KEY DB_PASSWORD"
 
 EC2_HOST="${EC2_HOST:-18.136.60.128}"
 EC2_USER="${EC2_USER:-ec2-user}"