diff --git a/docker-compose.dev.yml b/docker-compose.dev.yml
index 1bf04d50..d155f4d3 100644
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -59,8 +59,7 @@ services:
       DATA_ROOT: /app/data
       LOG_RETENTION_DAYS: ${LOG_RETENTION_DAYS:-30}
       CLAIM_BASE_URL: ${CLAIM_BASE_URL:-http://localhost/#/claim}
-      ADMIN_SESSION_SECRET: ${ADMIN_SESSION_SECRET}
-      ADMIN_DEFAULT_USERS_JSON: ${ADMIN_DEFAULT_USERS_JSON}
+      # ADMIN_* 仅走 env_file，避免 JSON 经 ${} 注入时被 YAML 破坏
       KUASHOU_INDUSTRY_RATE_LIMIT_MAX: ${KUASHOU_INDUSTRY_RATE_LIMIT_MAX:-120}
     logging: *json-log-rotation
     volumes:
diff --git a/docker-compose.yml b/docker-compose.yml
index 6c884fdc..305e0e95 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -56,8 +56,8 @@ services:
       DATA_ROOT: /app/data
       LOG_RETENTION_DAYS: ${LOG_RETENTION_DAYS:-30}
       CLAIM_BASE_URL: ${CLAIM_BASE_URL:-http://localhost/#/claim}
-      ADMIN_SESSION_SECRET: ${ADMIN_SESSION_SECRET}
-      ADMIN_DEFAULT_USERS_JSON: ${ADMIN_DEFAULT_USERS_JSON}
+      # ADMIN_SESSION_SECRET / ADMIN_DEFAULT_USERS_JSON 仅走 env_file。
+      # 勿在此处用 ${ADMIN_DEFAULT_USERS_JSON} 再注入：JSON 会被 YAML 解析破坏，导致生产校验失败。
       KUASHOU_INDUSTRY_RATE_LIMIT_MAX: ${KUASHOU_INDUSTRY_RATE_LIMIT_MAX:-120}
     logging: *json-log-rotation
     volumes: