diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 875b63a..3a83df0 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -184,6 +184,7 @@ jobs:
             LETSENCRYPT_EMAIL=${{ env.LETSENCRYPT_EMAIL }}
             IMAGE_REF=${{ env.IMG }}
             DOCKERHUB_USERNAME=${{ secrets.DOCKERHUB_USERNAME }}
+            PUSH_TOKEN=${{ secrets.PUSH_TOKEN }}
             EOT
           EOF
 
diff --git a/.github/workflows/flask_ci.yml b/.github/workflows/flask_ci.yml
index 297c4d1..0e98c0e 100644
--- a/.github/workflows/flask_ci.yml
+++ b/.github/workflows/flask_ci.yml
@@ -15,6 +15,8 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Build & start services
+        env:
+          PUSH_TOKEN: ${{ secrets.PUSH_TOKEN }}
         run: |
           docker compose up -d --build
           # give the app a moment to start
@@ -26,4 +28,4 @@ jobs:
 
       - name: Tear down
         if: always()
-        run: docker compose down --volumes --remove-orphans
\ No newline at end of file
+        run: docker compose down --volumes --remove-orphans
diff --git a/app.py b/app.py
index eb5d9ad..8c3e6c8 100644
--- a/app.py
+++ b/app.py
@@ -17,7 +17,9 @@
 app = Flask(__name__)
 
 DB_PATH = "candles.db"
-PUSH_TOKEN = "여기에_긴랜덤토큰_32자이상"
+PUSH_TOKEN = os.environ.get("PUSH_TOKEN")
+if not PUSH_TOKEN:
+    raise RuntimeError("PUSH_TOKEN not set")
 
 def init_db():
     conn = sqlite3.connect(DB_PATH)
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 1f9a14a..4b9174c 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -5,6 +5,7 @@ services:
     image: ${IMAGE_REF}
     environment: # <- 매핑 형식
       FLASK_ENV: production
+      PUSH_TOKEN: ${PUSH_TOKEN}
     expose:
       - "5000"
     restart: unless-stopped
diff --git a/docker-compose.yml b/docker-compose.yml
index 27e8a39..aecac2c 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,8 +3,9 @@ services:
     build: .
     ports: 
       - 5000:5000
-    environment: 
-      - FLASK_ENV=development
+    environment:
+      FLASK_ENV: development
+      PUSH_TOKEN: ${PUSH_TOKEN:-ci_dummy_token}
 
   nginx:
     image: nginx:alpine
@@ -13,4 +14,4 @@ services:
     depends_on:
       - web
     volumes:
-      - ./nginx:/etc/nginx/conf.d:ro
\ No newline at end of file
+      - ./nginx:/etc/nginx/conf.d:ro