The problem for me with dokploy is how do you manage in-config secrets for deployed apps. There are many apps which have secrets in their configs that can't be imported from env variables.

The only solution is to have these files locally on the server and then use an external bind mount.

I solved this in my docker-compose-gitops-action by just inserting secrets before copying the files to the server.

https://fariszr.com/docker-compose-gitops-github/

you can't do that with dokploy even with this dokploy action so it's triggers a pull from the source repo only.

Also the preview feature on dokploy is almost useless because there is no variable to get the preview URL dynamically.

Seems like a glaring omission. EDIT found this in the docs would it work for you? EDIT-2 I re-read your post and saw you had actually said secrets that can't be derived from env vars, ah well :)

https://docs.dokploy.com/docs/core/variables

I just deployed glusterfs that is mounted on all machines. It's pretty slow by itself but is good enough for secrets that are just read at startup.

Just mount it at the same path on all hosts and then bind-mount it into the container and it will work no matter where the container is scheduled

Have to think about backup strategy yourself tho.