diff --git a/entrypoint.sh b/entrypoint.sh
index 22c116c..82779f7 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -33,9 +33,10 @@ fetch_secrets() {
     if (!secrets.secrets) { console.error('[infisical:$5] No secrets returned'); process.exit(1); }
 
     for (const s of secrets.secrets) {
+      // Skip if already set via docker-compose/env (env overrides take precedence)
+      if (process.env[s.secretKey]) continue;
       const escaped = s.secretValue.replace(/'/g, \"'\\\\''\" );
-      // Only set if not already defined (docker-compose env takes precedence)
-      console.log('export ' + s.secretKey + \"=\\${\" + s.secretKey + \":-'\" + escaped + \"'}\");
+      console.log('export ' + s.secretKey + \"='\" + escaped + \"'\");
     }
   } catch (e) { console.error('[infisical:$5] Error:', e.message); process.exit(1); }
 })();