dragonfly config

with ENV secret support