finally works - used data instead of env variables in secrets.yml and development.rb; put those two files in .gitignore to avoid sending them to git