---
name: demo
services:
locket:
image: ghcr.io/bpbradley/locket:op
secrets:
- op_token
environment:
OP_SERVICE_ACCOUNT_TOKEN_FILE: /run/secrets/op_token
secret_TEST_SECRET: "op://Mordin/SecretPassword/password"
command: --log-level=debug
volumes:
- ./secrets/templates:/templates:ro
- secrets-store:/run/secrets
demo:
image: busybox
user: "65532:65532"
command: ["cat", "/run/secrets/test_secret"]
depends_on:
locket:
condition: service_healthy
volumes:
- secrets-store:/run/secrets
secrets:
op_token:
file: /etc/op/token
volumes:
secrets-store:
driver: local
driver_opts:
type: tmpfs
device: tmpfs