diff --git a/docker-compose.v2.yml b/docker-compose.v2.yml
index bf4463a..b8e1acd 100644
--- a/docker-compose.v2.yml
+++ b/docker-compose.v2.yml
@@ -14,7 +14,9 @@ services:
   # ── Shared infrastructure ───────────────────────────────────────────────────
 
   postgres:
-    image: postgres:16-alpine
+    # Pull infra images through the Nexus mirror (Docker Hub blocks Iran IPs).
+    # Override INFRA_REGISTRY= (empty) to use plain Docker Hub names elsewhere.
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}postgres:16-alpine
     container_name: fr2-postgres
     restart: unless-stopped
     environment:
@@ -38,7 +40,7 @@ services:
       start_period: 10s
 
   minio:
-    image: minio/minio:latest
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}minio/minio:latest
     container_name: fr2-minio
     restart: unless-stopped
     command: server /data --console-address ":9001"
@@ -328,7 +330,7 @@ services:
   # For local dev (no real domain), comment out this block and access
   # services directly on their host ports (:3000, :8088, :9000).
   caddy:
-    image: caddy:2-alpine
+    image: ${INFRA_REGISTRY:-mirror.soroushasadi.com/}caddy:2-alpine
     container_name: fr2-caddy
     restart: unless-stopped
     # Opt-in only: `docker compose --profile edge up`. NOT started by default —