diff --git a/docker-compose.yml b/docker-compose.yml
index 35b1968..e86e167 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -27,6 +27,13 @@ services:
       CRANK_ADMIN_BIND: ${CRANK_ADMIN_BIND:-0.0.0.0:3001}
       CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-info}
       CRANK_SECRET_PROVIDER: ${CRANK_SECRET_PROVIDER:-env}
+      CRANK_PUBLIC_BASE_URL: ${CRANK_PUBLIC_BASE_URL:-http://localhost:3000}
+      CRANK_SESSION_SECRET: ${CRANK_SESSION_SECRET}
+      CRANK_PASSWORD_PEPPER: ${CRANK_PASSWORD_PEPPER}
+      CRANK_SESSION_TTL_HOURS: ${CRANK_SESSION_TTL_HOURS:-24}
+      CRANK_BOOTSTRAP_ADMIN_EMAIL: ${CRANK_BOOTSTRAP_ADMIN_EMAIL}
+      CRANK_BOOTSTRAP_ADMIN_PASSWORD: ${CRANK_BOOTSTRAP_ADMIN_PASSWORD}
+      CRANK_BOOTSTRAP_ADMIN_DISPLAY_NAME: ${CRANK_BOOTSTRAP_ADMIN_DISPLAY_NAME:-Crank Owner}
     depends_on:
       postgres:
         condition: service_healthy
@@ -49,8 +56,10 @@ services:
       CRANK_DATABASE_URL: ${CRANK_DATABASE_URL:-postgres://crank:crank@postgres:5432/crank}
       CRANK_STORAGE_ROOT: ${CRANK_STORAGE_ROOT:-/var/lib/crank/storage}
       CRANK_MCP_BIND: ${CRANK_MCP_BIND:-0.0.0.0:3002}
+      CRANK_MCP_REFRESH_MS: ${CRANK_MCP_REFRESH_MS:-5000}
       CRANK_LOG_LEVEL: ${CRANK_LOG_LEVEL:-info}
       CRANK_SECRET_PROVIDER: ${CRANK_SECRET_PROVIDER:-env}
+      CRANK_PUBLIC_BASE_URL: ${CRANK_PUBLIC_BASE_URL:-http://localhost:3000}
     depends_on:
       postgres:
         condition: service_healthy