Looking to secure secrets within widgets

[the-bort-the]

Description

As far as widgets go, can docker secrets be used? I tried passing homepage.widget.password=/var/run/MT_AUTH but I see the widget displaying an "API Error Information".

This label works with the actual secret passed in as string. Is everyone just loading their .env with the passwords in plain text? I would like to avoid using plain text in and form and am curious to know if there is something else which can be done. This specific example if for a separate compose.yml used to deploy Adguard. I also tried using htpasswd, but that doesn't seem to work either.

homepage version

v0.10.7

Installation method

Docker

Configuration

No response

Container Logs

No response

Browser Logs

No response

Troubleshooting

homepage.widget.password=/var/run/MT_AUTH doesn't work
homepage.widget.password=mysupersecretstring this works
homepage.widget.password=$$mys$$upe$$rsecretstring doesn't work using htpasswd either