add secrets.yml to .gitignore file and configure it in productoin server