move config into env variables and secure using github secret for hook