Yeah… that all makes sense and those docks seem decent. The piece of the puzzle that’s missing for me is: how does docker turn a yaml config that says like … (from their example):

> frontend:
>     image: example/webapp
>     ports:
>       - "443:8043"
>     networks:
>       - front-tier
>       - back-tier
>     configs:
>       - httpd-config
>     secrets:
>       - server-certificate

… into actual operating, functioning container blobs? e.g. How does it know that “secrets: server-certificate means that it should take an ssl cert and place it in the container? How does it know where to place that certificate?