Better way to manage secrets with `docker compose`
reddit / selfhosted

----------------------------------------------------------------------
onedr0p · 2023-12-16 12:23

There are no excellent ways to handle secrets with docker compose, you
can only add them via env in plain text or using a 'secret file '
which is a plain text secret on disk. If you need better support for
secrets maybe Kubernetes is in your future.

----------------------------------------------------------------------
igor_47 · 2023-12-16 20:55

Hi, curious, did you read the linked post? I'm wondering how using k8s
would be an improvement over the outlined approach.

----------------------------------------------------------------------
sk1nT7 · 2023-12-16 21:21

Could you elaborate on how dsm injects the secrets during runtime? I
cannot grasp yet how it works.

So if I have an environment variable in my compose file, it will be a
DSM placeholder. Dsm will then at some point inject the secret from an
encrypted template into the environment of the running docker
container, correct?

What about a config file? Will dsm replace the config file with the
real secrets? However, then the secrets are stored in the config file.
Also for the future or is there a revert back.

Haven't had a look at your py code. Sorry but maybe you can give a
technical deep dive on how secrets are injected for various cases
(env, config).

----------------------------------------------------------------------
kmisterk · 2023-12-17 05:41

## Post Removed

Hey, igor_47!

Thanks for your submission on selfhosted.

Your post has been removed due to a violation of the purpose of the
subreddit: **Self Hosting**

## Not Self-Hosted

When it comes to posts regarding applications in this subreddit, they
must feature a self-hosted tool, or a tool that *can be* self-hosted,
or some kind of related information, help request, or otherwise
related to a tool that is something that one can self-host.

If you believe this post *is in fact* relevant to /r/selfhosted, feel
free to [message the mods](https://www.reddit.com/message/compose/?to=
/r/selfhosted&subject=Removed For Not Being Self-
Hosted&message=[Removed
Post](https://www.reddit.com/r/selfhosted/comments/18jctd3/-/\)) with
your concerns.