diff --git a/backend/src/core/config/config-loader.ts b/backend/src/core/config/config-loader.ts
index c53530b..e0eb168 100644
--- a/backend/src/core/config/config-loader.ts
+++ b/backend/src/core/config/config-loader.ts
@@ -41,13 +41,13 @@ const configSchema = z.object({
     audience: z.string(),
   }),
 
-  // External APIs configuration
+  // External APIs configuration (optional)
   external: z.object({
     vpic: z.object({
       url: z.string(),
       timeout: z.string(),
-    }),
-  }),
+    }).optional(),
+  }).optional(),
 
   // Service configuration
   service: z.object({
diff --git a/config/app/production.yml b/config/app/production.yml
index 752f18f..c0ff2b0 100755
--- a/config/app/production.yml
+++ b/config/app/production.yml
@@ -29,7 +29,6 @@ auth0:
   audience: https://api.motovaultpro.com
   # client_id and client_secret loaded from secrets
 
-# External APIs Configuration
 # google_maps_api_key loaded from secrets/app/google-maps-api-key.txt
 
 # Service Authentication
diff --git a/scripts/inject-secrets.sh b/scripts/inject-secrets.sh
index 989b28d..b890211 100755
--- a/scripts/inject-secrets.sh
+++ b/scripts/inject-secrets.sh
@@ -57,9 +57,9 @@ inject_secret() {
         rm -rf "$target_path"
     fi
 
-    # Copy the secret file
+    # Copy the secret file (644 so container users can read)
     cp "$source_path" "$target_path"
-    chmod 600 "$target_path"
+    chmod 644 "$target_path"
     echo "  OK: $file_name"
 }