Docker compose terraform, gitlab backend, aws

docker-compose.yaml

---
services:
  terraform:
    image: hashicorp/terraform:1.4.0
    working_dir: ${PWD}
    entrypoint: ../tf.sh
    volumes:
      - ${PWD}:/${PWD}
      - /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem:/etc/ssl/certs/ca-certificates.crt
    environment:
      - TF_CLI_CONFIG_FILE=.terraformrc
      - TF_VAR_environment
      - TF_HTTP_USERNAME
      - TF_HTTP_PASSWORD
      - TF_HTTP_ADDRESS=https://gitlab/api/v4/projects/9999/terraform/state/${TF_VAR_environment}
      - TF_HTTP_LOCK_METHOD=POST
      - TF_HTTP_LOCK_ADDRESS=https://gitlab/api/v4/projects/9999/terraform/state/${TF_VAR_environment}/lock
      - TF_HTTP_UNLOCK_ADDRESS=https://gitlab/api/v4/projects/9999/terraform/state/${TF_VAR_environment}/lock
      - TF_HTTP_UNLOCK_METHOD=DELETE
      - AWS_ACCESS_KEY_ID
      - AWS_SECRET_ACCESS_KEY
      - AWS_SESSION_TOKEN
      - AWS_SECURITY_TOKEN