diff --git a/docker-compose.yml b/docker-compose.yml
index ebf44a7..b658f25 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -143,6 +143,12 @@ services:
       - REDIS_QUEUE=redis://erpnext-redis:6379/1
       - REDIS_SOCKETIO=redis://erpnext-redis:6379/2
       - SOCKETIO_PORT=9000
+      # Portal needs these: CUSTOMER_JWT_SECRET verifies the /set-password magic
+      # link tokens signed by the API; DATABASE_URL lets the /orders portal page
+      # read compliance_orders from Postgres. Without them the set-password link
+      # shows "Link invalid" and the portal Compliance section is empty.
+      - CUSTOMER_JWT_SECRET=${CUSTOMER_JWT_SECRET}
+      - DATABASE_URL=postgresql://pw:${DB_PASSWORD:-pw_dev_2026}@api-postgres:5432/performancewest
     volumes:
       - erpnext-frappe-public:/home/frappe/frappe-bench/apps/frappe/frappe/public
       - erpnext-erpnext-public:/home/frappe/frappe-bench/apps/erpnext/erpnext/public