Stored encrypted at rest (AES-256-GCM). Applied as DOCKER_CONFIG before docker compose pull/up. Empty Stack = global (used by every stack); set a stack name to override the global entry for that one stack.

Import stacks from an external directory (e.g. Dockge migration). Mount the source directory into the Composer container as a read-only volume (e.g. /import/dockge). Each subdirectory with a compose.yaml will be imported.