Oh, sorry, I didn’t put my pasted Compose file into code markup.
The USER/PASS entries were commented out with a hash character.
Also, after removing them completely and redeploying stack (via Portainer, if it matters) - the credentials are still requested.