---
services:
  app:
    secrets:
      - api_key
    environment:
      API_KEY_URL: "file:///keys.json"
    configs:
    - source: apikeyfile
      target: /keys.json
      mode: 0555

secrets:
  api_key:
    external: true
    name: ${STACK_NAME}_api_key_${SECRET_API_KEY_VERSION}

configs:
  apikeyfile:
    name: ${STACK_NAME}_apikeyfile_${APIKEYFILE_VERSION}
    file: apikey.json.tmpl
    template_driver: golang