diff --git a/fruitshorts-transcode-worker/src/main/resources/application-prod.yml b/fruitshorts-transcode-worker/src/main/resources/application-prod.yml
index 2acb6a8..ca001a1 100644
--- a/fruitshorts-transcode-worker/src/main/resources/application-prod.yml
+++ b/fruitshorts-transcode-worker/src/main/resources/application-prod.yml
@@ -11,12 +11,23 @@ spring:
     timeout-per-shutdown-phase: 30s
 
 fruitshorts:
+  jwt:
+    # worker 本身不签发/校验令牌，但 ProdSecretGuard 要求 prod 下密钥齐全；
+    # 不给 dev 默认值，漏配即启动失败（与两个入口同一口径）
+    admin-secret: ${JWT_ADMIN_SECRET:}
+    app-secret: ${JWT_APP_SECRET:}
   media:
+    # 生产必开播放签名（与两个入口一致，fail-fast 也要求为 true）
+    signature-secret: ${MEDIA_SIGNATURE_SECRET:}
+    signature-required: true
     transcode:
       # 生产此进程必须真的跑转码
       worker-enabled: true
       # 生产按小时级重试间隔，避免坏片源把队列打满
       poll-delay-ms: ${TRANSCODE_POLL_DELAY_MS:5000}
+  cors:
+    # worker 不对外提供接口，仅为通过 prod fail-fast 校验
+    allowed-origins: ${CORS_ALLOWED_ORIGINS:}
 
 logging:
   level: