version: "3.8"

services:
  app:
    environment:
      - AZURE_TENANT_ID
      - AZURE_CLIENT_ID
      - AZURE_SUBSCRIPTION_ID
      - AZURE_RESOURCE_GROUP
      - AZURE_CLIENT_SECRET_FILE=/run/secrets/azure_secret
    secrets:
      - azure_secret

secrets:
  azure_secret:
    name: ${STACK_NAME}_azure_secret_${SECRET_AZURE_CLIENT_SECRET_VERSION}
    external: true