diff --git a/docker-compose.yml b/docker-compose.yml
index eeae7fe..65133fc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,8 +5,16 @@ services:
     restart: unless-stopped
     ports:
       - "8080:8080"
-    env_file: .env
+    environment:
+      # Edit the values here, or leave the ${...} placeholders and set them in a .env file / your stack's env UI.
+      SEAFILE_URL: ${SEAFILE_URL:-https://seafile.necloud.us}
+      ONLYOFFICE_URL: ${ONLYOFFICE_URL:-https://onlyoffice.necloud.us}
+      AUDIOBOOKS_URL: ${AUDIOBOOKS_URL:-https://audiobooks.necloud.us}
+      ONLYOFFICE_JWT_SECRET: ${ONLYOFFICE_JWT_SECRET:-}    # same value as the OnlyOffice server's JWT secret
+      PUBLIC_URL: ${PUBLIC_URL:-}                           # e.g. https://hub.necloud.us (OnlyOffice posts saved edits here)
+      HUB_SETUP_CODE: ${HUB_SETUP_CODE:-}                   # first passkey; if empty, a code is printed in the log
+      COOKIE_SECRET: ${COOKIE_SECRET:-}                     # optional; auto-generated and kept in /data if empty
     volumes:
-      - hub-data:/data   # passkeys + session secret live here
+      - hub-data:/data   # passkeys, calendar links and the session secret live here
 volumes:
   hub-data: