diff --git a/deploy/stack/docker-compose.yml b/deploy/stack/docker-compose.yml
index c61b7e0..95820cc 100644
--- a/deploy/stack/docker-compose.yml
+++ b/deploy/stack/docker-compose.yml
@@ -148,6 +148,12 @@ services:
       PANEL_LOCAL_ROLE: ${PANEL_LOCAL_ROLE:-}
       # Identitas Trino untuk sesi lokal (tanpa JWT) — service account Basic.
       TRINO_SERVICE_ACCOUNT: ${TRINO_SERVICE_ACCOUNT:-}
+      TRINO_SERVICE_PASSWORD: ${TRINO_SERVICE_PASSWORD:-}
+      # Pin host per-service (opsional) — registry difilter ke host ini.
+      SICABE_TRINO_HOST: ${SICABE_TRINO_HOST:-}
+      SICABE_AIRFLOW_HOST: ${SICABE_AIRFLOW_HOST:-}
+      SICABE_STARROCKS_HOST: ${SICABE_STARROCKS_HOST:-}
+      SICABE_OPA_HOST: ${SICABE_OPA_HOST:-}
       # ── Opsional (ada default di kode) ──
       KEYCLOAK_URL: ${KEYCLOAK_URL:-}
       KEYCLOAK_CLIENT_ID: ${KEYCLOAK_CLIENT_ID:-sicabe-control-panel}