Security: add option to not pass secrets as environment variables

[happysalada]

hey, great service here, thank you!

In terms of security , passing secrets as environment variable isn't great as other processes have access to the environment. The best practice here is to use paths for secrets (docker can load secrets from paths with docker secrets).

Would it be possible to read secrets from an env variable pointing to a path ? So for example instead of the env var being BEARER_TOKEN it would be BEARER_TOKEN_PATH and the app would then do a readfile on it.

I can understand that this can be a pain, but I just thought it might be good to ask anyways.

[knoel99]

I personally just added them in a .env file