docker compose environment variable from secret