# Optional overlay: create private_secrets/ and private_ca/ on the Docker host.
# docker compose -f compose.yaml -f compose.mysql-secrets.yaml up -d --build
# These paths must never be committed or copied into the application image.
services:
  worker:
    volumes:
      - ./private_secrets:/run/secrets:ro
      - ./private_ca:/etc/siteforge/certs:ro