I don't think you're wrong - but you might want to look at docker swarm over compose (even on single nodes) and: https://docs.docker.com/engine/swarm/secrets/

I don't think you're wrong - but you might want to look at docker swarm over compose (even on single nodes) and: https://docs.docker.com/engine/swarm/secrets/ https://docs.docker.com/engine/swarm/secrets/ (as well as the sibling "config")