Snippet from docker-compose:

```
secrets:
  - source: "docker_secrets_expand"
    target: "/docker_secrets_expand.sh"
    mode: "0555"
  - db_password
environment:
  DB_PASSWORD:DOCKER-SECRET->db_password
entrypoint:
  - "/docker_secrets_expand.sh"
  - "/entrypoint.sh"
```