diff --git a/compose.yml b/compose.yml
index 76dafe3..935c2da 100644
--- a/compose.yml
+++ b/compose.yml
@@ -19,7 +19,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}_web.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.${STACK_NAME}_web.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}_web.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        - "coop-cloud.${STACK_NAME}.version=0.2.0+v3.5.5-hometown-1.0.8"
+        - "coop-cloud.${STACK_NAME}.version=0.2.1+v3.5.5-hometown-1.0.8"
     configs: &configs
       - source: entrypoint_sh
         target: /usr/local/bin/entrypoint.sh
@@ -92,7 +92,6 @@ services:
       - OIDC_TOKEN_ENDPOINT
       - OIDC_UID_FIELD
       - OIDC_USER_INFO_ENDPOINT
-      - OTP_SECRET_FILE=/run/secrets/otp_secret
       - PAPERCLIP_ROOT_PATH
       - PAPERCLIP_ROOT_URL
       - RAILS_ENV
@@ -121,7 +120,6 @@ services:
       - SAML_SECURITY_WANT_ASSERTION_ENCRYPTED
       - SAML_SECURITY_WANT_ASSERTION_SIGNED
       - SAML_UID_ATTRIBUTE
-      - SECRET_KEY_BASE_FILE=/run/secrets/secret_key_base
       - SINGLE_USER_MODE
       - SMTP_AUTH_METHOD
       - SMTP_CA_FILE
diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl
index fd92848..57b8ff0 100644
--- a/entrypoint.sh.tmpl
+++ b/entrypoint.sh.tmpl
@@ -25,6 +25,10 @@ file_env() {
 
 export DB_PASS=$(cat /run/secrets/db_password)
 
+# for sidekiq service bundle exec env var threading
+file_env "OTP_SECRET"
+file_env "SECRET_KEY_BASE"
+
 {{ if eq (env "OIDC_ENABLED") "true" }}
 file_env "OIDC_CLIENT_SECRET"
 {{ end }}