Modules log their arguments to the journal, which Vector ships to
VictoriaLogs, so container env secrets were stored in plain text.

Assisted-by: Claude Opus 5 via Claude Code

diff --git a/lotus-land-story/caddy.yml b/lotus-land-story/caddy.yml
index a28315c..ae38345 100644
--- a/lotus-land-story/caddy.yml
+++ b/lotus-land-story/caddy.yml
@@ -58,6 +58,7 @@
           - name: lotus_land_story
         etc_hosts:
           host.docker.internal: host-gateway
+      no_log: true
 
   handlers:
     - name: Import restarts
diff --git a/lotus-land-story/gitea.yml b/lotus-land-story/gitea.yml
index bda7476..06255c2 100644
--- a/lotus-land-story/gitea.yml
+++ b/lotus-land-story/gitea.yml
@@ -105,6 +105,7 @@
         restart_policy: unless-stopped
         networks:
           - name: lotus_land_story
+      no_log: true
 
   handlers:
     - name: Import restarts
@@ -151,5 +152,6 @@
         restart_policy: unless-stopped
         networks:
           - name: lotus_land_story
+      no_log: true
 
 # vim: ft=yaml.ansible
diff --git a/lotus-land-story/gotosocial.yml b/lotus-land-story/gotosocial.yml
index 839c0cc..d67084a 100644
--- a/lotus-land-story/gotosocial.yml
+++ b/lotus-land-story/gotosocial.yml
@@ -98,6 +98,7 @@
           - /mnt/lotus-land-story/gotosocial/data:/gotosocial/storage
         networks:
           - name: lotus_land_story
+      no_log: true
 
   handlers:
     - name: Import restarts
diff --git a/lotus-land-story/homebox.yml b/lotus-land-story/homebox.yml
index 1c713bb..0b6b2e5 100644
--- a/lotus-land-story/homebox.yml
+++ b/lotus-land-story/homebox.yml
@@ -56,5 +56,6 @@
         restart_policy: unless-stopped
         networks:
           - name: lotus_land_story
+      no_log: true
 
 # vim: ft=yaml.ansible
diff --git a/lotus-land-story/ketchup.yml b/lotus-land-story/ketchup.yml
index 762b7e4..062ef34 100644
--- a/lotus-land-story/ketchup.yml
+++ b/lotus-land-story/ketchup.yml
@@ -29,5 +29,6 @@
         restart_policy: unless-stopped
         networks:
           - name: lotus_land_story
+      no_log: true
 
 # vim: ft=yaml.ansible
diff --git a/lotus-land-story/miniflux.yml b/lotus-land-story/miniflux.yml
index e097dda..fa6d23a 100644
--- a/lotus-land-story/miniflux.yml
+++ b/lotus-land-story/miniflux.yml
@@ -76,6 +76,7 @@
           - name: lotus_land_story
         etc_hosts:
           host.docker.internal: host-gateway
+      no_log: true
 
   handlers:
     - name: Import restarts
diff --git a/lotus-land-story/monica.yml b/lotus-land-story/monica.yml
index cba47b3..0dcf290 100644
--- a/lotus-land-story/monica.yml
+++ b/lotus-land-story/monica.yml
@@ -128,6 +128,7 @@
           - /mnt/lotus-land-story/monica/db:/var/lib/mysql
         networks:
           - name: lotus_land_story
+      no_log: true
 
     - name: Run Monica
       community.docker.docker_container:
@@ -154,5 +155,6 @@
           - /mnt/lotus-land-story/monica/php/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini
         networks:
           - name: lotus_land_story
+      no_log: true
 
 # vim: ft=yaml.ansible
diff --git a/lotus-land-story/paperless-ngx.yml b/lotus-land-story/paperless-ngx.yml
index e9d91fc..6574bdd 100644
--- a/lotus-land-story/paperless-ngx.yml
+++ b/lotus-land-story/paperless-ngx.yml
@@ -55,6 +55,7 @@
           host.docker.internal: host-gateway
       # paperless images are huge, so clean them up after we update the container
       notify: Prune unused Docker images
+      no_log: true
 
   handlers:
     - name: Prune unused Docker images
diff --git a/mountain-of-faith/main.yml b/mountain-of-faith/main.yml
index 66ca974..46cbfa9 100644
--- a/mountain-of-faith/main.yml
+++ b/mountain-of-faith/main.yml
@@ -158,6 +158,7 @@
           - SYS_NICE
         restart_policy: unless-stopped
         state: started
+      no_log: true
 
 # TODO Remove Minio
 - import_playbook: minio.yml
diff --git a/playbooks/syncthing.yml b/playbooks/syncthing.yml
index 0e1fc26..b96b6b5 100644
--- a/playbooks/syncthing.yml
+++ b/playbooks/syncthing.yml
@@ -103,6 +103,7 @@
         - { key: "options/minHomeDiskFree", value: "0" }
         - { key: "defaults/folder/minDiskFree", value: "75" }
         - { key: "defaults/folder/minDiskFree", attribute: "unit", value: "%" }
+      no_log: true
 
   handlers:
     - name: Restart syncthing