setup production secrets to pull from .env