From 179b51c7a56de7fd0778c46d7eab134f1f6feaf7 Mon Sep 17 00:00:00 2001
From: MrMeeb <mrmeeb@noreply.git.mrmeeb.stream>
Date: Sat, 30 May 2026 20:44:39 +0000
Subject: [PATCH] move to sops exec-env instead of decrypting env file on disk

---
 stacks/supporting-services/supporting-services.toml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/stacks/supporting-services/supporting-services.toml b/stacks/supporting-services/supporting-services.toml
index 8259723..a083140 100644
--- a/stacks/supporting-services/supporting-services.toml
+++ b/stacks/supporting-services/supporting-services.toml
@@ -11,8 +11,5 @@ additional_env_files = [
     {path = ".env", track = true},
     {path = "/var/docker/.ansible-generated.env", track = false}
 ]
-pre_deploy.command = """
-source ${HOME}/.bashrc
-sops decrypt -i ${PWD}/.env
-"""
+compose_cmd_wrapper = "sops exec-env .env '[[COMPOSE_COMMAND]]'"
 linked_repo = "mrmeeb-labs/supporting-services"
\ No newline at end of file