diff --git a/modules/config/config.go b/modules/config/config.go
index e9b049d..77a0b99 100644
--- a/modules/config/config.go
+++ b/modules/config/config.go
@@ -152,12 +152,23 @@ func generateConfig() {
 // os.ExpandEnv 字符 $ 无法逃逸
 // https://github.com/golang/go/issues/43482
 func expand(s string, mapping func(string) string) string {
-	r := regexp.MustCompile(`\${([a-zA-Z_]+[a-zA-Z0-9_]*)}`)
-	re := r.FindAllStringSubmatch(s, -1)
-	for _, i := range re {
-		if len(i) == 2 {
-			s = strings.ReplaceAll(s, i[0], mapping(i[1]))
+	r := regexp.MustCompile(`\${([a-zA-Z_]+[a-zA-Z0-9_:]*)}`)
+	return r.ReplaceAllStringFunc(s, func(s string) string {
+		s = strings.Trim(s, "${}")
+		// todo: use strings.Cut once go1.18 is released
+		placeholder, default_, ok := cut(s, ":")
+		m := mapping(placeholder)
+		if ok && m == "" {
+			return default_
 		}
-	}
-	return s
+		return m
+	})
+
+}
+
+func cut(s, sep string) (before, after string, found bool) {
+	if i := strings.Index(s, sep); i >= 0 {
+		return s[:i], s[i+len(sep):], true
+	}
+	return s, "", false
 }
diff --git a/modules/config/config_test.go b/modules/config/config_test.go
index 295a450..8e6f5da 100644
--- a/modules/config/config_test.go
+++ b/modules/config/config_test.go
@@ -21,6 +21,11 @@ func Test_expand(t *testing.T) {
 			mapping:  strings.ToUpper,
 			expected: "$123",
 		},
+		{
+			src:      "foo: ${bar:123456}",
+			mapping:  func(s string) string { return "" },
+			expected: "foo: 123456",
+		},
 	}
 	for i, tt := range tests {
 		if got := expand(tt.src, tt.mapping); got != tt.expected {