config.js has sensitive information, so it should live on ansible

venue.yml has sensitive data, should be loaded via ansible
payment report has filters now