move sensivitive information (db settings, secret key) to environment