diff --git a/preflight.sh b/preflight.sh
index 70b3624..c6823fe 100755
--- a/preflight.sh
+++ b/preflight.sh
@@ -260,6 +260,16 @@ check_required_vars() {
     fi
   done
 
+  # DB vars are conditional on GITEA_DB_TYPE (required when NOT sqlite3)
+  if [[ "${GITEA_DB_TYPE:-sqlite3}" != "sqlite3" ]]; then
+    for var in GITEA_DB_HOST GITEA_DB_PORT GITEA_DB_NAME GITEA_DB_USER GITEA_DB_PASSWD; do
+      if [[ -z "${!var:-}" ]]; then
+        log_error "  → Missing required var: $var (required when GITEA_DB_TYPE=${GITEA_DB_TYPE})"
+        missing=1
+      fi
+    done
+  fi
+
   # SSL vars are conditional on SSL_MODE:
   # - letsencrypt => SSL_EMAIL is required
   # - existing    => SSL_CERT_PATH + SSL_KEY_PATH are required