title: How to maintain secrets used in Dockerfile?
body: <p>Below is the snippet of docker-compose file having passwords:</p>
  
  <pre><code>test:
    build: ../../
    dockerfile: docker/dev/Dockerfile
    volumes_from:
      - cache
    links:
      - db
    environment:
      DJANGO_SETTINGS_MODULE: todobackend.settings.test
      MYSQL_HOST: db
      MYSQL_USER: root
      MYSQL_PASSWORD: password
      TEST_OUTPUT_DIR: /reports
  
  db:
    image: mysql:5.6
    hostname: db
    expose:
      - "3386"
    environment:
      MYSQL_ROOT_PASSWORD: password
  </code></pre>
  
  <hr>
  
  <p>Running this file in AWS environment,</p>
  
  <p>Can be using KMS storing in s3 and another approach is AWS parameter store</p>
  
  <p>When building dockerfile and launching containers using <code>docker-compose</code>, How to maintain secrets safely, without exposing it to text files? any code snippet...</p>