diff --git a/docker-compose.yml b/docker-compose.yml
index c34a246..146b752 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -29,6 +29,10 @@ services:
       - BOTFIGHTS_NWC_URL=${BOTFIGHTS_NWC_URL:-}
       - BOTFIGHTS_CASHU_MINT_URL=${BOTFIGHTS_CASHU_MINT_URL:-}
       - BOTFIGHTS_DEV_PAYOUT_LNADDRESS=${BOTFIGHTS_DEV_PAYOUT_LNADDRESS:-}
+      # ── Auth ──
+      # Generate with: openssl rand -hex 32
+      - JWT_SECRET=${JWT_SECRET}
+      - BOTFIGHTS_CREATOR_PUBKEYS=${BOTFIGHTS_CREATOR_PUBKEYS:-da5e0c1b646bdb13c2300f805b0ca3e5afe5b052c594ce78bac8978d21c3fa39}
       # SQLite database path (defaults to /app/server/data/botfights.db)
       # - DB_PATH=/app/server/data/botfights.db