CLIENT_ID=
CLIENT_SECRET=
REDIRECT_URI=
OPTIONAL_SCOPES=
DATABASE_URL=
# generated by `openssl rand -hex 24` - used to encrypt session
APP_SECRET_KEY=