diff --git a/docker-compose.production.yml b/docker-compose.production.yml
index 73e35597..fb51c04b 100644
--- a/docker-compose.production.yml
+++ b/docker-compose.production.yml
@@ -209,9 +209,9 @@ services:
           cpus: '0.5'
 
     # Stricter health checks
-    # Uses REDIS_PASSWORD environment variable exported by entrypoint
+    # Health check reads password directly from Docker Secret
     healthcheck:
-      test: ["CMD-SHELL", "redis-cli -a \"$REDIS_PASSWORD\" ping | grep -q PONG"]
+      test: ["CMD-SHELL", "redis-cli -a \"$(cat /run/secrets/redis_password 2>/dev/null || echo '')\" ping | grep -q PONG"]
       interval: 10s
       timeout: 3s
       retries: 5