add config/secrets.yml to .gitignore and set some env vars there