diff --git a/cloudflared/.env.example b/cloudflared/.env.example
new file mode 100644
index 0000000..1f64442
--- /dev/null
+++ b/cloudflared/.env.example
@@ -0,0 +1 @@
+TUNNEL_TOKEN=your_tunnel_token
\ No newline at end of file
diff --git a/cloudflared/docker-compose.yml b/cloudflared/docker-compose.yml
index 3fa708e..439cf1c 100644
--- a/cloudflared/docker-compose.yml
+++ b/cloudflared/docker-compose.yml
@@ -5,7 +5,7 @@ services:
     restart: unless-stopped
     command: tunnel --no-autoupdate run
     environment:
-      - TUNNEL_TOKEN=eyJhIjoiZjg2YzAzZTQwNzFlNjZhYjc2Yzg5ZDQ3OTNmMGM1YjAiLCJ0IjoiZmMyNWNjMzMtNjZmOC00MDU5LTg4ZDMtM2I5NWY4NDIzODAyIiwicyI6Ill6bGhObVV3TVRjdFpHUXdNaTAwT1RBM0xXRXhaRE10WVRBNE5tUmpOVGszTW1ZNCJ9
+      - TUNNEL_TOKEN=${TUNNEL_TOKEN}
     networks:
       - traefik
 
diff --git a/immich/.env.example b/immich/.env.example
new file mode 100644
index 0000000..714e39e
--- /dev/null
+++ b/immich/.env.example
@@ -0,0 +1 @@
+DB_PASSWORD=db_password_here
\ No newline at end of file
diff --git a/immich/docker-compose.yml b/immich/docker-compose.yml
index 5eb59d3..5a454d3 100644
--- a/immich/docker-compose.yml
+++ b/immich/docker-compose.yml
@@ -11,7 +11,7 @@ services:
     environment:
       - DB_HOSTNAME=immich_postgres
       - DB_USERNAME=immich
-      - DB_PASSWORD=wnAtOcXH+dxG0xLPtZonv2pPTtlkIw1fRz26GMNQ7ag=
+      - DB_PASSWORD=${DB_PASSWORD}
       - DB_DATABASE_NAME=immich
       - REDIS_HOSTNAME=immich_redis
     depends_on:
@@ -47,7 +47,7 @@ services:
     container_name: immich_postgres
     image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
     environment:
-      POSTGRES_PASSWORD: wnAtOcXH+dxG0xLPtZonv2pPTtlkIw1fRz26GMNQ7ag=
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
       POSTGRES_USER: immich
       POSTGRES_DB: immich
       POSTGRES_INITDB_ARGS: '--data-checksums'
diff --git a/opencloud/docker-compose.yml b/opencloud/docker-compose.yml
index 1ff0c82..6d36979 100644
--- a/opencloud/docker-compose.yml
+++ b/opencloud/docker-compose.yml
@@ -12,10 +12,10 @@ services:
       - OC_INSECURE=false
       - PROXY_TLS=false
       - PROXY_HTTP_ADDR=0.0.0.0:9200
-      - INITIAL_ADMIN_PASSWORD=dVnzfCKamzuv1RluijV1l59uU/mwtW9O
+      - INITIAL_ADMIN_PASSWORD=${INITIAL_ADMIN_PASSWORD}
       - COLLABORATION_WOPI_SRC=https://wopiserver.krilio.net
-      - COLLABORATION_WOPI_SECRET=32522ab288fd6c77bee76d7d304443c5cdbf6a83e007754f62398194a766040f
-      - OC_WOPI_SECRET=32522ab288fd6c77bee76d7d304443c5cdbf6a83e007754f62398194a766040f
+      - COLLABORATION_WOPI_SECRET=${COLLABORATION_WOPI_SECRET}
+      - OC_WOPI_SECRET=${COLLABORATION_WOPI_SECRET}
       - OC_ADD_RUN_SERVICES=collaboration
       - APP_REGISTRY_MIMETYPES_JSON=[{"mime_type":"application/vnd.oasis.opendocument.text","extension":"odt","name":"OpenDocument Text","description":"OpenDocument Text","icon":"","default_app":"Collabora","allow_creation":true},{"mime_type":"application/vnd.oasis.opendocument.spreadsheet","extension":"ods","name":"OpenDocument Spreadsheet","description":"OpenDocument Spreadsheet","icon":"","default_app":"Collabora","allow_creation":true},{"mime_type":"application/vnd.oasis.opendocument.presentation","extension":"odp","name":"OpenDocument Presentation","description":"OpenDocument Presentation","icon":"","default_app":"Collabora","allow_creation":true}]
       - COLLABORATION_APP_NAME=Collabora