diff --git a/docker/docker-compose.prod.yml b/docker/docker-compose.prod.yml
index 3c459a8..3111fe3 100644
--- a/docker/docker-compose.prod.yml
+++ b/docker/docker-compose.prod.yml
@@ -243,9 +243,10 @@ services:
     ports:
       - "4096:4096"
     healthcheck:
+      # BusyBox wget has no --user/--password; use Authorization header.
       test:
         - CMD-SHELL
-        - 'wget -qO- --timeout=3 --user="${OPENCODE_SERVER_USERNAME:-opencode}" --password="${OPENCODE_SERVER_PASSWORD}" http://127.0.0.1:4096/global/health >/dev/null || exit 1'
+        - 'AUTH=$(printf "%s" "${OPENCODE_SERVER_USERNAME:-opencode}:${OPENCODE_SERVER_PASSWORD}" | base64 | tr -d "\n"); wget -qO- --timeout=3 --header="Authorization: Basic $AUTH" http://127.0.0.1:4096/global/health >/dev/null || exit 1'
       interval: 30s
       timeout: 10s
       retries: 3