set up secrets.yml for production