* secrets are stored in env files, examples were added * add .*.env to .{docker,git}ignore to prevent anybody from mistakenly committing their env files (unless it's forced) * [skip ci]