diff --git a/client/app/web/firebase-messaging-sw.js b/client/app/web/firebase-messaging-sw.js
index 97a9097..b3dbf5d 100644
--- a/client/app/web/firebase-messaging-sw.js
+++ b/client/app/web/firebase-messaging-sw.js
@@ -1,14 +1,13 @@
 // Background handler for FCM web push. Keep the config in sync with
 // window.KC_FIREBASE in index.html (a service worker can't read window).
-// Fill in apiKey / appId from the Firebase console before enabling push.
 importScripts('https://www.gstatic.com/firebasejs/10.13.2/firebase-app-compat.js');
 importScripts('https://www.gstatic.com/firebasejs/10.13.2/firebase-messaging-compat.js');
 
 firebase.initializeApp({
-  apiKey: 'REPLACE_ME',
+  apiKey: 'AIzaSyDxBpdmW8lUHSuix--3AsWJScGQy9o3G_M',
   projectId: 'konfi-castle-app',
   messagingSenderId: '307226979593',
-  appId: 'REPLACE_ME',
+  appId: '1:307226979593:web:66898b2c78b2d110ef77d8',
 });
 
 firebase.messaging().onBackgroundMessage(function (payload) {
diff --git a/client/app/web/index.html b/client/app/web/index.html
index 320c4af..a49b314 100644
--- a/client/app/web/index.html
+++ b/client/app/web/index.html
@@ -32,26 +32,27 @@
   <title>KC-App</title>
   <link rel="manifest" href="manifest.json">
 
-  <!-- Firebase Cloud Messaging (web push). Fill in apiKey / appId / vapidKey
-       from the Firebase console (Project settings > General / Cloud Messaging).
-       Until then window.KC_FIREBASE.apiKey stays "REPLACE_ME" and
-       kcGetPushToken() returns null, so the app simply runs without push. -->
+  <!-- Firebase Cloud Messaging (web push). vapidKey still needs the Web Push
+       certificate key pair (Project settings > Cloud Messaging > Web config).
+       Until it's set kcGetPushToken() returns null and the app runs without
+       push. -->
   <script src="https://www.gstatic.com/firebasejs/10.13.2/firebase-app-compat.js"></script>
   <script src="https://www.gstatic.com/firebasejs/10.13.2/firebase-messaging-compat.js"></script>
   <script>
     window.KC_FIREBASE = {
-      apiKey: "REPLACE_ME",
+      apiKey: "AIzaSyDxBpdmW8lUHSuix--3AsWJScGQy9o3G_M",
       authDomain: "konfi-castle-app.firebaseapp.com",
       projectId: "konfi-castle-app",
       storageBucket: "konfi-castle-app.firebasestorage.app",
       messagingSenderId: "307226979593",
-      appId: "REPLACE_ME",
+      appId: "1:307226979593:web:66898b2c78b2d110ef77d8",
+      measurementId: "G-NK8K5VV40D",
       vapidKey: "REPLACE_ME"
     };
     window.kcGetPushToken = async function () {
       try {
         var cfg = window.KC_FIREBASE;
-        if (!cfg.apiKey || cfg.apiKey === "REPLACE_ME" || !("Notification" in window)) return null;
+        if (!cfg.vapidKey || cfg.vapidKey === "REPLACE_ME" || !("Notification" in window)) return null;
         if (!firebase.apps.length) firebase.initializeApp(cfg);
         var permission = await Notification.requestPermission();
         if (permission !== "granted") return null;