changed conf to use environment variables for sensitive information