There are many methods to inject Infisical secrets to docker-based applications. Regardless of which method you choose, these methods will inject secrets from Infisical as environment variables into your Docker container.

Docker Entrypoint

Install and run your app start command with Infisical CLI

Docker run

Feed secrets via --env-file flag in docker run command

Docker compose

Inject secrets to multiple services using Docker Compose

The main difference between the “Docker Entrypoint” and “Docker run” approach is where the Infisical CLI is installed. In most production settings, it’s typically inconvenient to have the Infisical CLI installed and executed externally. As a result, we suggest using the “Docker Entrypoint” method for production purposes. However, if this limitation doesn’t apply to you, select the method that best fits your needs.