How do you pass docker secrets to ghost service?

So I’m trying to get ghost up and running in my docker swarm using the official image, and I’m wondering if theres a way for me to use the files from my docker secrets instead of the regular environment variables for configuration. Can I do something like this?

      database__connection__password__file: /run/secrets/db_root_pass

The database config is passed directly to knex, which in turn passes config to the driver (sqlite3 / mysql). As far as I’m aware, neither driver supports secrets files