Figure out how to have less dependency on Vault.

[crankynetman]

Right now, we have a lot of dependency on vault for rendering secrets. We should consider how to make that not mandatory.

[samoehlert]

I wonder if we can do something like this:

env_file:
      - ${SECRETS_FILE:-/dev/null}

We could then add to our .env file:

SECRETS_FILE="/etc/vault.d/secrets/kv_root_security.env

Meanwhile anyone else using it could point it to a config file with secrets in it they store elsewhere or they could just not set it at all and find another way to inject the secrets (docker secrets, environment variables directly in the file (if they want to monkeypatch), or another Secret Manager).

I'm also not sure if /dev/null would even work, or be smart. At first blush it makes sense to me, but we'd have to do some thinking and testing.

[crankynetman]

I think slapping a variable on it is definitely the correct start, I like it!