add secrets.yml in, prod secret in env anyway