substitute env vars