GOAL: Keep secrets out of plaintext (esp when syncing dockerfile and docker-compose.yaml to repo)
- Each secret needs to be a single text file with a clear name
- Edit
docker-entrypoint.sh
to run per environmental variable - (Re)Build docker image with
docker-entrypoint.sh
as entrypoint - Create
secrets
in docker-compose - Call secrets with "_FILE" appended to the name when specifying environmental variable