There are many methods to inject Infisical secrets into Docker-based applications. Regardless of the method you choose, they all inject secrets from Infisical as environment variables into your Docker container.

Docker Entrypoint

Install and run your app start command with Infisical CLI

Docker run

Feed secrets with the --env-file flag when using the docker run command

Docker compose

Inject secrets into multiple services using Docker Compose

The main difference between the “Docker Entrypoint” and “Docker run” approach is where the Infisical CLI is installed. In most production settings, it’s typically less convenient to have the Infisical CLI installed and executed externally, so we suggest using the “Docker Entrypoint” method for production purposes. However, if this limitation doesn’t apply to you, select the method that best fits your needs.