make internal access configurable via env vars