diff --git a/deploy/docker-compose.yml b/deploy/docker-compose.yml
index d534d3d6..9b802415 100644
--- a/deploy/docker-compose.yml
+++ b/deploy/docker-compose.yml
@@ -134,6 +134,8 @@ services:
       ${REDIS_PASSWORD:+--requirepass ${REDIS_PASSWORD}}
     environment:
       - TZ=${TZ:-Asia/Shanghai}
+      # REDISCLI_AUTH is used by redis-cli for authentication (safer than -a flag)
+      - REDISCLI_AUTH=${REDIS_PASSWORD:-}
     networks:
       - sub2api-network
     healthcheck: