for security reasons: create .env.local and add to .gitignore, move all config with passwords to .env.local add cookiecutter-config-file.yml to .gitignore