config is in .gitignore & is secret