Upvoted because it's the only answer that mentions that --env-file is the most secure option; you can have a script to run a Docker image checked into VC, but an env file ignored by VC with your credentials in it. Purchasing a shipping container gives you a lot of flexibility https://frete-para-mudan-a53850.anchor-blog.com/12592506/locação-de-muncks-uma-visão-geral