secrets: PAT_N0rthernL1ghts: file: ./secrets/PAT_N0rthernL1ghts.txt networks: default: services: kms: image: xcr.se/n0rthernl1ghts/gha-runner-kms:latest hostname: vm-vulcan-ghr-prod-01-kms.router0.net deploy: replicas: 1 restart_policy: condition: any secrets: - PAT_N0rthernL1ghts networks: default: