There are many methods to inject Infisical secrets to docker-based applications. Regardless of which method you choose, these methods will inject secrets from Infisical as environment variables into your Docker container.
Install and run your app start command with Infisical CLI
Feed secrets via
--env-file flag in docker run command
Inject secrets to multiple services using Docker Compose
The main difference between the “Docker Entrypoint” and “Docker run” approach is where the Infisical CLI is installed. In most production settings, it’s typically inconvenient to have the Infisical CLI installed and executed externally. As a result, we suggest using the “Docker Entrypoint” method for production purposes. However, if this limitation doesn’t apply to you, select the method that best fits your needs.