services:
  foo:
    secrets:
      - source: secret1
        target: /run/secret/banana
        uid: "1000"
        gid: "1000"
        mode: 0700

secrets:
  secret1:
    file: ./foo/bar