diff --git a/Dockerfile b/Dockerfile
index 433b5bae..2cb1f619 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,6 +13,14 @@ RUN if [ -f pnpm-lock.yaml ]; then npm install -g pnpm && pnpm install --frozen-
 # Copy source code
 COPY . .
 
+# Build-time env vars (VITE_* are baked into the bundle at build time)
+ARG VITE_SUPABASE_URL
+ARG VITE_SUPABASE_ANON_KEY
+ARG VITE_AUTHENTIK_PROVIDER
+ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL
+ENV VITE_SUPABASE_ANON_KEY=$VITE_SUPABASE_ANON_KEY
+ENV VITE_AUTHENTIK_PROVIDER=$VITE_AUTHENTIK_PROVIDER
+
 # Build the client so the Activity gets compiled JS (no Vite dev mode in Discord iframe)
 RUN npm run build:client
 
diff --git a/docker-compose.yml b/docker-compose.yml
index b8329fb1..ffe8c5ee 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,11 @@
 services:
   aethex-forge:
-    build: .
+    build:
+      context: .
+      args:
+        - VITE_SUPABASE_URL=${VITE_SUPABASE_URL}
+        - VITE_SUPABASE_ANON_KEY=${VITE_SUPABASE_ANON_KEY}
+        - VITE_AUTHENTIK_PROVIDER=${VITE_AUTHENTIK_PROVIDER}
     container_name: aethex-forge
     restart: unless-stopped
     ports: