add s3 configuration, log rotation to s3, and infrastructure for keeping secrets somewhere reasonable
move all secrets into one file. start to document DO stuff