move to sops exec-env instead of decrypting env file on disk

This commit is contained in:
2026-05-30 20:44:39 +00:00
parent 45308079c7
commit 179b51c7a5
@@ -11,8 +11,5 @@ additional_env_files = [
{path = ".env", track = true},
{path = "/var/docker/.ansible-generated.env", track = false}
]
pre_deploy.command = """
source ${HOME}/.bashrc
sops decrypt -i ${PWD}/.env
"""
compose_cmd_wrapper = "sops exec-env .env '[[COMPOSE_COMMAND]]'"
linked_repo = "mrmeeb-labs/supporting-services"