Seems like a glaring omission. EDIT found this in the docs would it work for you? EDIT-2 I re-read your post and saw you had actually said secrets that can't be derived from env vars, ah well :)

https://docs.dokploy.com/docs/core/variables