diff --git a/entrypoint.sh b/entrypoint.sh
index 8e8ea1c..22c116c 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -34,7 +34,8 @@ fetch_secrets() {
 
     for (const s of secrets.secrets) {
       const escaped = s.secretValue.replace(/'/g, \"'\\\\''\" );
-      console.log('export ' + s.secretKey + \"='\" + escaped + \"'\");
+      // Only set if not already defined (docker-compose env takes precedence)
+      console.log('export ' + s.secretKey + \"=\\${\" + s.secretKey + \":-'\" + escaped + \"'}\");
     }
   } catch (e) { console.error('[infisical:$5] Error:', e.message); process.exit(1); }
 })();