```
cat >${cfg.statePath}/config/secrets.yml <<EOF
production:
  secret_key_base: $SECRETKEY
  otp_key_base: $OTPKEY
  db_key_base: $DBKEY
  jws_private_key: $JWSKEY
EOF
```