service: Support setting type and target for db password secret

roles/service/defaults/main.yaml

@@ -11,6 +11,8 @@ service_container_secrets: []
 service_container_env: {}
 
 service_database_type: none
+service_database_secret_type: mount
+service_database_secret_target: "{{ service_database_type }}"
 service_postgres_image: docker.io/library/postgres
 service_redis: false
 

roles/service/meta/argument_specs.yaml

@@ -177,11 +177,24 @@ argument_specs:
             The password will also be available as the
             service_podman_secrets['{{ service_name }}-{{ service_database_type }}'] variable.
         type: str
-        required: false
         choices:
           - postgres
           - none
+        required: false
         default: none
+      service_database_secret_type:
+        description: Secret type for database secret for service container
+        type: str
+        choices:
+          - mount
+          - env
+        required: false
+        default: mount
+      service_database_secret_target:
+        description: Secret target for database secret for service container.
+        type: str
+        required: false
+        default: "{{ service_database_type }}"
       service_postgres_image:
         description: Postgresql image to use.
         type: str

roles/service/vars/main.yaml

@@ -20,7 +20,13 @@ _service_container_secrets: >-
           | map('community.general.dict_kv', 'name')
         )
       | map('combine')
-      + ([{'name': _service_database_name, 'target': service_database_type }] if _service_setup_database else [])
+      + (
+        [{
+          'name': _service_database_name,
+          'type': service_database_secret_type,
+          'target': service_database_secret_target
+        }] if _service_setup_database else []
+      )
   }}
 
 _service_additional_containers: >-