update to use env for sensitive data (like database credentials, secret keys) etc.