env vars + code/config separation