diff --git a/stacks/backup/docker-compose.yml b/stacks/backup/docker-compose.yml
index 5f34c9d..ea02a8d 100644
--- a/stacks/backup/docker-compose.yml
+++ b/stacks/backup/docker-compose.yml
@@ -16,13 +16,6 @@ services:
     networks: [backup, edge]
     env_file:
       - stack.env
-    environment:
-      - KOPIA_PASSWORD=${KOPIA_REPOSITORY_PASSWORD}
-      - TZ=${TZ}
-      - B2_BUCKET=${B2_BUCKET}
-      - B2_KEY_ID=${B2_KEY_ID}
-      - B2_APPLICATION_KEY=${B2_APPLICATION_KEY}
-      - B2_ENDPOINT=${B2_ENDPOINT}
     cap_add:
       - SYS_ADMIN
     security_opt:
@@ -58,8 +51,6 @@ services:
     networks: [backup]
     env_file:
       - stack.env
-    environment:
-      - TZ=${TZ}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - /config/backup/dumps:/dumps
diff --git a/stacks/backup/init-kopia.sh b/stacks/backup/init-kopia.sh
index 6f1e323..89ce42b 100644
--- a/stacks/backup/init-kopia.sh
+++ b/stacks/backup/init-kopia.sh
@@ -4,6 +4,7 @@ set -e
 
 CONFIG_DIR=/app/config
 export KOPIA_CONFIG_PATH="${CONFIG_DIR}/repository.config"
+export KOPIA_PASSWORD="${KOPIA_REPOSITORY_PASSWORD}"
 
 mkdir -p "${CONFIG_DIR}" /app/cache /app/logs
 
diff --git a/stacks/backup/stack.env b/stacks/backup/stack.env
index 000681c..2dbdc4f 100644
--- a/stacks/backup/stack.env
+++ b/stacks/backup/stack.env
@@ -8,7 +8,7 @@ KOPIA_REPOSITORY_PASSWORD=8f4c2a9e1b7d6035f8e2c4a6910d3b7e5f9a8c2d6b4e1f0a3c7d9e
 B2_BUCKET=ginnoir-backup
 B2_KEY_ID=00452ab80ae44e10000000001
 B2_APPLICATION_KEY=K004P2lGTtRiCe430O5dVZJiTn7Kwr8
-B2_ENDPOINT=https://s3.us-west-004.backblazeb2.com
+B2_ENDPOINT=s3.us-west-004.backblazeb2.com
 
 # ntfy alerts (same pattern as watchtower)
 NTFY_URL=https://ntfy.ginnoir.com/backup