I may well swing back around and make a pull request for this in the next few days.

You might be able to do via Docker and an env file https://docs.docker.com/compose/environment-variables/env-file/
But that would mean putting the variable name into the secret too

Oooo, didn't know about that.

It would still mean that the admin credentials were in the environment though, which is something that should be avoided apparently.

Still, better than committing the creds to the repo!

I would test this, but: I think "env" variables imported by Docker from a file like that aren't actually visible in the process table as env variables

Hold on, that's the case for some other apps, but in Docker they're literally available for process as env variables. BELAY THAT SUGGESTION