To run the backend via Docker, the container fetches secrets directly from Doppler at startup using a service token.
Generate a token and export it in your shell:
eval $(make docker-token)Then start the stack:
make docker-upYou'll need to re-run eval $(make docker-token) in any new shell session, or add DOPPLER_TOKEN to your shell profile.
Run OpenSearch locally with the security plugin disabled (no TLS or auth required for local dev):
docker run -d --name opensearch \
-p 9200:9200 -p 9600:9600 \
-e "discovery.type=single-node" \
-e "DISABLE_SECURITY_PLUGIN=true" \
opensearchproject/opensearch:latestVerify it's running:
curl http://localhost:9200In production, OpenSearch uses TLS and credentials injected via Doppler.
OPENSEARCH_INSECURE_SKIP_TLSshould befalsein prod.