Use environment variables for secret settings