docker compose environment variables from secret