I have never liked the idea of using environment variables to pass important information, like is common for Dockerized deployments.

Here's a terrible consequence:

https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/