diff --git a/internal/config/config.go b/internal/config/config.go
index 924d5ca..4159482 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -113,6 +113,12 @@ func applyEnv(cfg *Config) {
 	setString(&cfg.Auth.TrustedInternalAddr, "IM_WORKBENCH_TRUSTED_INTERNAL_ADDR")
 	setString(&cfg.Auth.InternalServiceName, "IM_WORKBENCH_INTERNAL_SERVICE_NAME")
 	setString(&cfg.Auth.InternalSecret, "IM_WORKBENCH_INTERNAL_SECRET")
+	if strings.TrimSpace(cfg.Auth.InternalSecret) == "" {
+		setString(&cfg.Auth.InternalSecret, "IM_INTERNAL_API_SECRET")
+	}
+	if strings.TrimSpace(cfg.Auth.InternalSecret) == "" {
+		setString(&cfg.Auth.InternalSecret, "IM_ADMIN_API_SECRET")
+	}
 	if brokers := strings.TrimSpace(os.Getenv("IM_WORKBENCH_KAFKA_BROKERS")); brokers != "" {
 		cfg.Kafka.Brokers = splitCSV(brokers)
 	}