Hardcoded default secrets in docker-compose.yaml pose security risk for production deployments