[huimang]

I solve the secrets problem by using ansible to provision the host system and build the compose file, and ansible-vault to handle the secrets.

You can also dynamically build a compose file for example:

export COMPOSE_FILE="$(ls -1 services/*/compose.yml | paste -sd ":" -)"

In general I don’t have many issues with the docker-compose.yml format.