diff --git a/README.md b/README.md
index bc465c37a566756517a8cac383c24766d2b6927a..aeba09da0439fc473246e172acbc3ebf0d4fbbbe 100644
--- a/README.md
+++ b/README.md
@@ -151,6 +151,7 @@ SPACEDECK_API_TOKEN=ohP2AeBirineimohS6Pha1oaphoapoM2
 SPACEDECK_INVITE_CODE=eij9weipaxohYiexoh1loo5zae8ic2ah
 ETHERPAD_API_KEY=iethae9aulo0ung6Tida6uquahmahphi
 LIVEKIT_KEYS_API_SECRET=QEHNPlkZ4sIWecuB4rZQVtTWMire3ZbI
+LIVEKIT_E2EE_SALT=Mnn8IrFdE0cjWKQBLtB2fvulyYNvSDA1
 ```
 
 #### Add the secretes to the `config/controller.toml`
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 0f006a36732b8a3f42e790f897d59a5456ec4577..2db79ab1e4f1d74ac01510c2e6d796e367eb56b0 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -31,6 +31,7 @@ services:
       DATA_PROTECTION_URL: ${DATA_PROTECTION_URL:-}
       SENTRY_DSN: ${SENTRY_DSN:-}
       PRODUCT_VERSION: "v24.21.0-rc.3"
+      LIVEKIT_E2EE_SALT: "${LIVEKIT_E2EE_SALT:-}"
 
   # *** controller ***
   controller:
diff --git a/extras/gen-secrets.sh b/extras/gen-secrets.sh
index 1c31ce07df39eb00cbb380c6f91dbc0be8d99e80..8439616cbc593c360ac3ac382079d0dacdd800df 100755
--- a/extras/gen-secrets.sh
+++ b/extras/gen-secrets.sh
@@ -11,6 +11,7 @@ if type "pwgen" > /dev/null; then
   echo "SPACEDECK_INVITE_CODE=$(pwgen -s 32 1)"
   echo "ETHERPAD_API_KEY=$(pwgen -s 32 1)"
   echo "LIVEKIT_KEYS_API_SECRET=$(pwgen -s 32 1)"
+  echo "LIVEKIT_E2EE_SALT=$(pwgen -s 32 1)"
 else
   echo "the utility 'pwgen' needs to be installed."
   exit 1