That’d presumably leave the clear text footprint I'm trying to avoid, albeit in a non-Kamailio file. I’ve made a start on an approach to read from a file, Docker secrets are basically just files, but the Docker platform handles them securely.
Thanks - Robert...
On 16 Nov 2017, at 21:46, Bastian Triller bastian.triller@gmail.com wrote:
isn't using a group in the db URL an option? Generate some .cnf in /etc/mysql/conf.d (or where MySQL searches its configuration in a Docker container) from the secret and use the group in your db URL in kamailio.cfg.
http://www.kamailio.org/docs/modules/5.0.x/modules/db_mysql.html#idp419 97212