get env from secrets