diff --git a/docs/env-master-template.env b/docs/env-master-template.env
index 25b20a0c05..0e765f8a18 100644
--- a/docs/env-master-template.env
+++ b/docs/env-master-template.env
@@ -25,7 +25,13 @@
 # Broker addresses for event-driven architecture
 # Format: host1:port1,host2:port2
 # Used by: omniclaude, omniintelligence, omnidash, omnimemory, omnimarket
-KAFKA_BOOTSTRAP_SERVERS=192.168.86.201:19092
+# [REQUIRED] No safe default — a hardcoded LAN IP silently breaks off-network
+# dispatch (OMN-14162). Set the address that matches how you reach the lab
+# Redpanda broker:
+#   - On the LAN (192.168.86.x reachable directly): 192.168.86.201:19092
+#   - Off-network / traveling (Tailscale up): 100.109.203.94:39092
+#     (aka omninode-pc.tail75df5e.ts.net:39092)
+KAFKA_BOOTSTRAP_SERVERS=
 
 # Allowlist for Kafka broker validation (omniintelligence)
 # KAFKA_BROKER_ALLOWLIST=