move to sops exec-env instead of decrypting env file on disk

2026-05-30 20:44:39 +00:00
parent 45308079c7
commit 179b51c7a5
1 changed files with 1 additions and 4 deletions
@@ -11,8 +11,5 @@ additional_env_files = [
    {path = ".env", track = true},
    {path = "/var/docker/.ansible-generated.env", track = false}
 ]
-pre_deploy.command = """
+compose_cmd_wrapper = "sops exec-env .env '[[COMPOSE_COMMAND]]'"
 source ${HOME}/.bashrc
 sops decrypt -i ${PWD}/.env
 """
 linked_repo = "mrmeeb-labs/supporting-services"