use environment variables for sensitive data config