diff --git a/infra/.env.synology.example b/infra/.env.synology.example
index b671e88..476e19f 100644
--- a/infra/.env.synology.example
+++ b/infra/.env.synology.example
@@ -9,6 +9,7 @@ CMS_HTTP_BIND=172.22.0.222:9918
 CMS_AUTH_HTTP_BIND=172.22.0.222:9919
 CMS_AUTH_ADMIN_HTTP_BIND=127.0.0.1:9920
 CMS_EXTERNAL_SCHEME=https
+CMS_SERVICE_ENV_FILE=.env.synology
 
 # mounted NODE.DC site root on Synology
 CMS_NODEDC_SITE_PATH=/volume1/docker/dc-cms/sites/nodedc
diff --git a/infra/docker-compose.yml b/infra/docker-compose.yml
index 5ae3795..de4a878 100644
--- a/infra/docker-compose.yml
+++ b/infra/docker-compose.yml
@@ -5,7 +5,7 @@ services:
     image: caddy:2-alpine
     restart: unless-stopped
     env_file:
-      - .env
+      - ${CMS_SERVICE_ENV_FILE:-.env}
     ports:
       - "${CMS_HTTP_BIND:-127.0.0.1:8210}:80"
       - "${CMS_AUTH_HTTP_BIND:-127.0.0.1:8211}:80"
@@ -31,7 +31,7 @@ services:
       context: ..
     restart: unless-stopped
     env_file:
-      - .env
+      - ${CMS_SERVICE_ENV_FILE:-.env}
     environment:
       HOST: 0.0.0.0
       PORT: 8090
@@ -61,7 +61,7 @@ services:
     image: docker.io/library/postgres:16-alpine
     restart: unless-stopped
     env_file:
-      - .env
+      - ${CMS_SERVICE_ENV_FILE:-.env}
     environment:
       POSTGRES_DB: ${PG_DB:-authentik}
       POSTGRES_PASSWORD: ${PG_PASS:?database password required}
@@ -82,7 +82,7 @@ services:
     command: server
     restart: unless-stopped
     env_file:
-      - .env
+      - ${CMS_SERVICE_ENV_FILE:-.env}
     environment:
       AUTHENTIK_POSTGRESQL__HOST: postgresql-authentik
       AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
@@ -113,7 +113,7 @@ services:
     restart: unless-stopped
     user: root
     env_file:
-      - .env
+      - ${CMS_SERVICE_ENV_FILE:-.env}
     environment:
       AUTHENTIK_POSTGRESQL__HOST: postgresql-authentik
       AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}