diff --git a/.env.example b/.env.example
index 2f870f8..7d600c1 100644
--- a/.env.example
+++ b/.env.example
@@ -2,7 +2,6 @@
 # (Vite dev proxy in dev, Caddy in prod — see vite.config.ts / Caddyfile).
 # No API_BASE_URL override needed.
 PUBLIC_TURNSTILE_SITE_KEY=0x4AAAAAACI5pu-lNWFc6Wu1
-TURNSTILE_SECRET_KEY=
 
 # Sentry — error monitoring, tracing, session replay, logging
 # VITE_SENTRY_DSN is public (bundled into the browser build)
diff --git a/Containerfile b/Containerfile
index cccf968..6779761 100644
--- a/Containerfile
+++ b/Containerfile
@@ -4,6 +4,12 @@ WORKDIR /srv
 COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
 RUN pnpm install --frozen-lockfile
 COPY . .
+ARG PUBLIC_TURNSTILE_SITE_KEY
+ARG VITE_SENTRY_DSN
+ARG SENTRY_DSN
+ARG SENTRY_ORG
+ARG SENTRY_PROJECT
+ARG SENTRY_AUTH_TOKEN
 RUN pnpm build
 
 FROM node:22-alpine AS runtime
@@ -11,6 +17,7 @@ WORKDIR /srv
 ENV NODE_ENV=production
 ENV PORT=3000
 ENV HOST=0.0.0.0
+COPY --from=builder /srv/node_modules ./node_modules
 COPY --from=builder /srv/build ./build
 COPY --from=builder /srv/package.json ./
 EXPOSE 3000