so a plugin could support both this:

- name: upload
  settings:
    token:
     from_secret: token
    bucket: foo
    files:
    - bar.tar.gz
    - baz.tar.gz

and this:

- name: upload
  settings:
    token:
     from_secret: token
    from_file: path/to/file.yaml

'''
version: "3.7"

services:
drone-server:
image: drone/drone:1
container_name: drone_server
networks:

  - dronenet
ports:
- "8000:80"
- "8443:443"
environment:
  - DRONE_OPEN=true
  - DRONE_GITEA=true
  - DRONE_DEBUG=true
  - DRONE_PROVIDER=gitea
  - DRONE_RUNNER_CAPACITY=2
  - DRONE_GIT_ALWAYS_AUTH=true
  - DRONE_SERVER_HOST=192.168.32.50:8000
  - DRONE_GITEA_SERVER=http://192.168.32.50:3000/
  - DRONE_GITEA_SKIP_VERIFY=false
  - DRONE_SERVER_PROTO=http
  - DRONE_TLS_AUTOCERT=false
  - DRONE_ADMIN=asher
  - DRONE_GIT_USERNAME=asher
  - DRONE_GIT_PASSWORD=123456
  - DRONE_RPC_SECRET=8e1589b9261b53dd78e2180c0cd561198c2f5c1e
  - DRONE_LOGS_DEBUG=true
  - DRONE_DATABASE_DRIVER=sqlite3
  - DRONE_DATABASE_DATASOURCE=/data/database.sqlite
  - DRONE_USER_CREATE=username:asher,admin:true
restart: always
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/drone_1.0:/data

drone-agent:
image: drone/agent:1
container_name: drone_agent
networks:

  - dronenet
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/drone_1.0:/data
depends_on:
- drone-server
restart: always
environment:
  - DRONE_SECRET_SECRET=7890bcce69bb685a9a424767fe9d1be1
  - DRONE_RPC_SERVER=http://drone-server:9000
  - DRONE_SECRET_ENDPOINT=http://dronetest_vault:3000
  - DRONE_RPC_SECRET=8e1589b9261b53dd78e2180c0cd561198c2f5c1e
  - DRONE_LOGS_DEBUG=true
  - DRONE_DEBUG=true
  - DRONE_LOGS_PRETTY=true
  - DRONE_LOGS_NOCOLOR=false

vault:
image: vault:latest
container_name: vault
restart: always
ports:

  - 8200:8200
networks:
  - dronenet
volumes:
  - ./vault/file:/vault/file
  - ./vault/config:/vault/config
  - ./vault/logs:/vault/logs
cap_add:
  - IPC_LOCK
environment:
  - VAULT_ADDR=http://127.0.0.1:8200
command: vault server -config=/vault/config/local.json 

drone-vault:
image: drone/vault
container_name: dronetest_vault
depends_on:

  - drone-server
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /var/lib/drone_1.0:/data
restart: always
networks:
  - dronenet
environment:
  - SECRET_KEY=7890bcce69bb685a9a424767fe9d1be1  
  - DEBUG=true                                                                      
  - VAULT_ADDR=http://127.0.0.1:8200
  - VAULT_TOKEN_RENEWAL=84h
  - VAULT_TOKEN_TTL=168h
  - VAULT_TOKEN=s.JXiDyRwdgEo1RI6yR6df1QHe

networks:
dronenet:
'''