diff --git a/deploy_script.sh b/deploy_script.sh
index c0b8540..d4768e2 100644
--- a/deploy_script.sh
+++ b/deploy_script.sh
@@ -326,6 +326,15 @@ decrypt_envs() {
         if [[ -f "${svc_dir}/.env.age" ]]; then
             age --decrypt -i "${AGE_PRIVATE_KEY}" -o "${svc_dir}/.env" "${svc_dir}/.env.age"
             sed -i 's/\r$//' "${svc_dir}/.env"
+            
+            # Ensure BETTER_AUTH_SECRET is set for Paperclip
+            if [[ "${svc_name}" == "paperclip" ]]; then
+                if ! grep -q "BETTER_AUTH_SECRET" "${svc_dir}/.env"; then
+                    log "Generating missing BETTER_AUTH_SECRET in .env..."
+                    echo "BETTER_AUTH_SECRET=\"$(openssl rand -hex 32)\"" >> "${svc_dir}/.env"
+                fi
+            fi
+
             chmod 600 "${svc_dir}/.env"
         fi
     done
@@ -447,6 +456,7 @@ main() {
         else
             warn "Failed to generate bootstrap URL. Check container logs."
             notify "PaperClip Setup Fehler" "Konnte die Bootstrap-URL nicht generieren. Paperclip läuft ggf. noch nicht." "high" "warning"
+            docker logs paperclip_app --tail 20 || true
         fi
         log "========================================================="
     fi
diff --git a/services/paperclip/docker-compose.yml b/services/paperclip/docker-compose.yml
index ffad924..0ff258f 100644
--- a/services/paperclip/docker-compose.yml
+++ b/services/paperclip/docker-compose.yml
@@ -24,6 +24,7 @@ services:
     environment:
       DATABASE_URL: postgres://paperclip:${POSTGRES_PASSWORD}@paperclip-postgres:5432/paperclip
       PORT: "3100"
+      HOST: "0.0.0.0"
       SERVE_UI: "true"
       PAPERCLIP_HOME: "/paperclip"
       PAPERCLIP_DEPLOYMENT_MODE: "authenticated"