Mengelola Config & Secret

Jangan hardcode kredensial di image. Gunakan environment atau secret.

  services:
    app:
      env_file: [.env]
      secrets:
        - db_password

  secrets:
    db_password:
      file: ./secrets/db_password.txt

Secret di-mount sebagai file di `/run/secrets/`, tidak muncul di `docker inspect`.