Deploy — Docker Compose with Secrets Injected

Pulls Docker images and starts a Compose service with Secret Server credentials injected as environment variables. Secrets flow directly into the subprocess — never written to disk.

When to use

• Deploying a service that reads credentials from environment variables
• Starting a service without creating plaintext .env files
• CI/CD workflows where secrets must not touch the filesystem

Prerequisites

1. Valid Secret Server token
2. A JSON map file defining which secrets map to which env vars
3. Docker Compose installed on the target machine

Running a deploy