update secrets, change .env location