The full list that I have is actually: 
GOOGLE_DRIVE_EMAIL=<email>
GOOGLE_DRIVE_PASSWORD=<password>
AWS_BUCKET=TODO
AWS_ACCESS_KEY_ID=TODO
AWS_SECRET_ACCESS_KEY=TODO
GMAIL_USERNAME=no-reply@beyondz.org
GMAIL_PASSWORD=<password>

I store these in a .env file at the top-level which foreman uses for my local dev machine.  We also use a Heroku plugin to push the production values as described here: https://devcenter.heroku.com/articles/config-vars#using-foreman.  A sample file checked in with the contents of .env where we have the master list is what I was talking about.  I'll go assign the Asana task now.  Can you update this pull request with that file and README steps?