I solve the secrets problem by using ansible to provision the host system and build the compose file, and ansible-vault to handle the secrets. You can also dyn

I solve the secrets problem by using ansible to provision the host system and build the compose file, and ansible-vault to handle the secrets. You can also dynamically build a compose file for example: export COMPOSE_FILE="$(ls -1 services/*/compose.yml | paste -sd ":" -)" In general I don’t have many issues with the docker-compose.yml format.