fly.toml docker (build) secrets path

1

Would it be possible to specify build and regular secrets as filepaths in fly.toml

Thinking something like

[secrets]
  DATABASE_URL="./pg.secret"
[secrets.build]
  TS_AUTH_KEY="./tailscale.secret"

For simple setups this would let people run fly deploy in a repo with gitignored secrets and get a very simple on ramp to docker secrets.

For more involved setups, the builds could be run on a build server with a managed secrets mount with ephemeral keys on it.

I find threading lots of secret arguments in a deploy command is pretty error prone, its easy to forget to update (especially in CI), and it the command can easily get very long even in simple set ups.

2

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.