services: app: environment: - API_KEY secrets: - api_secret secrets: api_secret: name: ${STACK_NAME}_api_secret_${SECRET_API_SECRET_VERSION} external: true