diff --git a/deploy/preprod/docker-compose.yml b/deploy/preprod/docker-compose.yml
index 04ff8b8..1c99f6c 100644
--- a/deploy/preprod/docker-compose.yml
+++ b/deploy/preprod/docker-compose.yml
@@ -42,12 +42,12 @@ services:
 
       # Injectés par le pipeline, jamais commités. Vides, les routes de
       # connexion externe répondent 503 sans bloquer le démarrage.
-      GOOGLE_CLIENT_ID: "${GOOGLE_CLIENT_ID:-}"
-      GOOGLE_CLIENT_SECRET: "${GOOGLE_CLIENT_SECRET:-}"
-      FACEBOOK_APP_ID: "${FACEBOOK_APP_ID:-}"
-      FACEBOOK_APP_SECRET: "${FACEBOOK_APP_SECRET:-}"
+      GOOGLE_CLIENT_ID: "${GOOGLE_CLIENT_ID}"
+      GOOGLE_CLIENT_SECRET: "${GOOGLE_CLIENT_SECRET}"
+      FACEBOOK_APP_ID: "${FACEBOOK_APP_ID}"
+      FACEBOOK_APP_SECRET: "${FACEBOOK_APP_SECRET}"
       # Vide, la vérification anti-robot Turnstile est désactivée.
-      TURNSTILE_SECRET_KEY: "${TURNSTILE_SECRET_KEY:-}"
+      TURNSTILE_SECRET_KEY: "${TURNSTILE_SECRET_KEY}"
 
     command: >
       sh -c "
diff --git a/deploy/prod/docker-compose.yml b/deploy/prod/docker-compose.yml
index 32a1a90..49b7cb9 100644
--- a/deploy/prod/docker-compose.yml
+++ b/deploy/prod/docker-compose.yml
@@ -42,12 +42,12 @@ services:
 
       # Injectés par le pipeline, jamais commités. Vides, les routes de
       # connexion externe répondent 503 sans bloquer le démarrage.
-      GOOGLE_CLIENT_ID: "${GOOGLE_CLIENT_ID:-}"
-      GOOGLE_CLIENT_SECRET: "${GOOGLE_CLIENT_SECRET:-}"
-      FACEBOOK_APP_ID: "${FACEBOOK_APP_ID:-}"
-      FACEBOOK_APP_SECRET: "${FACEBOOK_APP_SECRET:-}"
+      GOOGLE_CLIENT_ID: "${GOOGLE_CLIENT_ID}"
+      GOOGLE_CLIENT_SECRET: "${GOOGLE_CLIENT_SECRET}"
+      FACEBOOK_APP_ID: "${FACEBOOK_APP_ID}"
+      FACEBOOK_APP_SECRET: "${FACEBOOK_APP_SECRET}"
       # Vide, la vérification anti-robot Turnstile est désactivée.
-      TURNSTILE_SECRET_KEY: "${TURNSTILE_SECRET_KEY:-}"
+      TURNSTILE_SECRET_KEY: "${TURNSTILE_SECRET_KEY}"
 
     command: >
       sh -c "