Remove the config/secrets.yml from .gitignore so that we track it in the repository. It's configured in such a way that it gets the production secret from the environment rather than being flatly coded into the file.