services:
  app:
    image: registry.example.com/team/app:1.0
    secrets:
      - db_password
secrets:
  db_password:
    file: ./secrets/db_password.txt