--- # nocheck: config-volume-secret The OpenTalk controller reads one controller.toml that carries the service API secret beside the non-secret settings; the controller has no separate secret source to point at instead. data: type: volume name: opentalk_data mounts: - service: controller target: /var/lib/opentalk config: type: volume name: opentalk_config minio: type: volume name: opentalk_minio mounts: - service: minio target: /data rabbit: type: volume name: opentalk_rabbit mounts: - service: rabbit target: /var/lib/rabbitmq controller_toml: type: config source: "{{ [lookup('container', 'web-app-opentalk', 'directories.volumes'), 'controller.toml'] | path_join }}" mode: "0444" mounts: - service: controller target: /controller/controller.toml livekit_yaml: type: config source: "{{ [lookup('container', 'web-app-opentalk', 'directories.volumes'), 'livekit.yaml'] | path_join }}" mode: "0444" mounts: - service: livekit target: /etc/livekit/livekit.yaml rabbitmq_conf: type: config source: "{{ [lookup('container', 'web-app-opentalk', 'directories.volumes'), 'rabbitmq.conf'] | path_join }}" mode: "0444" mounts: - service: rabbit target: /etc/rabbitmq/conf.d/10-deprecated-features.conf recorder_toml: type: config source: "{{ [lookup('container', 'web-app-opentalk', 'directories.volumes'), 'recorder.toml'] | path_join }}" mode: "0444" mounts: - service: recorder target: /recorder/recorder.toml