lock file from production
added db and secret files to gitignore