diff --git a/.env.example b/.env.example
index efc1c0e..6e74a16 100644
--- a/.env.example
+++ b/.env.example
@@ -17,8 +17,15 @@ POSTGRES_DB=openmonetis_db
 # Gere com: openssl rand -base64 32
 BETTER_AUTH_SECRET=your-secret-key-here-change-this
 BETTER_AUTH_URL=http://localhost:3000
+
+# Origins adicionais confiáveis para o Better Auth.
+# Útil para Cloudflare Tunnel, reverse proxy e URLs diferentes de BETTER_AUTH_URL.
+# Separe múltiplas origins por vírgula.
+# Exemplo: https://*.trycloudflare.com,https://openmonetis.seudominio.com
+BETTER_AUTH_TRUSTED_ORIGINS=
 # Defina como true para bloquear novos cadastros
 DISABLE_SIGNUP=false
+
 # Duração de sessões persistentes quando "Manter conectado" estiver marcado
 AUTH_SESSION_EXPIRES_IN_DAYS=30
 AUTH_SESSION_UPDATE_AGE_HOURS=24
diff --git a/docker-compose.yml b/docker-compose.yml
index edeb710..d997984 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,6 +36,7 @@ services:
       DATABASE_URL: ${DATABASE_URL:-postgresql://openmonetis:openmonetis_dev_password@db:5432/openmonetis_db}
       BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-}
       BETTER_AUTH_URL: ${BETTER_AUTH_URL:-http://localhost:3000}
+      BETTER_AUTH_TRUSTED_ORIGINS: ${BETTER_AUTH_TRUSTED_ORIGINS:-}
     depends_on:
       db:
         condition: service_healthy