diff --git a/.env.sample b/.env.sample
index dd3ad02..9ae5bb0 100644
--- a/.env.sample
+++ b/.env.sample
@@ -7,6 +7,9 @@ KEYCLOAK_CLIENT_ID=barfoo
 KEYCLOAK_DOMAIN=foobar.com
 KEYCLOAK_REALM=bazrealm
 
+#KEYCLOAK_GROUPS_KEY="groups"
+#KEYCLOAK_ADMINS_GROUP="Administrators"
+
 APP_THEME=default
 INVITE_TIME_LIMIT=30  # days
 
@@ -14,3 +17,5 @@ SECRET_APP_SECRET_KEY_VERSION=v1
 SECRET_KEYCLOAK_CLIENT_SECRET_VERSION=v1
 
 AUTOMATICALLY_LOG_IN=False
+
+#FEATURE_FLAG_ADMINS_ONLY=False
diff --git a/compose.yml b/compose.yml
index a1357f1..a8b11db 100644
--- a/compose.yml
+++ b/compose.yml
@@ -8,10 +8,13 @@ services:
       - APP_SECRET_KEY_FILE=/run/secrets/app_secret_key
       - APP_THEME
       - AUTOMATICALLY_LOG_IN
+      - FEATURE_FLAG_ADMINS_ONLY
       - INVITE_TIME_LIMIT
+      - KEYCLOAK_ADMINS_GROUP
       - KEYCLOAK_CLIENT_ID
       - KEYCLOAK_CLIENT_SECRET_FILE=/run/secrets/keycloak_client_secret
       - KEYCLOAK_DOMAIN
+      - KEYCLOAK_GROUPS_KEY
       - KEYCLOAK_REALM
       - REDIS_DB=0
       - REDIS_HOST=cache