Fixed env template

.env.example

@@ -2,6 +2,11 @@
 #
 # Copy this file to `.env` and fill in the values, then run `./setup.sh`.
 # All values are read by setup.sh / docker-compose / the bootstrap.
+#
+# Values may contain spaces. Quote them if they could be split by a shell,
+# e.g. ORG_NAME="My Org" or SMTP_FROM="Theta SSO <noreply@example.com>".
+# Quotes are optional but harmless — setup.sh + docker compose strip a single
+# matching pair of outer quotes from any value.
 
 # ── Directory / domain (REQUIRED-ish — set these) ────────────────────────────
 
@@ -10,7 +15,7 @@ LDAP_BASE_DN=dc=example,dc=com
 # DNS domain (dc=foo,dc=bar -> foo.bar). Leave blank to derive from LDAP_BASE_DN.
 LDAP_DOMAIN=
 LDAP_ADMIN_PASS=change-me-ldap-admin-password
-ORG_NAME=My Org
+ORG_NAME="My Org"
 
 # ── Public hostnames (REQUIRED) ───────────────────────────────────────────────
 # The proxy serves the SSO Manager UI at https://<SSO_HOST> and its own