diff --git a/config/environments/production.rb b/config/environments/production.rb
index c4e9414..96fc8c8 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -3,7 +3,7 @@
 Rails.application.configure do
   # Settings specified here will take precedence over those in config/application.rb.
 
-  config.hosts << "employee360-staging.notch8.cloud"
+  config.hosts << ENV['HOST_URL'] if ENV['HOST_URL'].present?
 
   # Code is not reloaded between requests.
   config.cache_classes = true
diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
index 515fd3c..834292a 100644
--- a/config/initializers/devise.rb
+++ b/config/initializers/devise.rb
@@ -14,7 +14,7 @@
   # confirmation, reset password and unlock tokens in the database.
   # Devise will use the `secret_key_base` as its `secret_key`
   # by default. You can change it below and use your own secret key.
-  # config.secret_key = '1cd30110a2be779c9380b59f95af0a485008aa816dbe61e9f9ca4454781336b90d7e360459a320020f12b04bd05e6794dc9f8dff04cde546a7fc3747e96ceb9e'
+  config.secret_key = ENV["SECRET_KEY_BASE"]
 
   # ==> Controller configuration
   # Configure the parent class to the devise controllers.
diff --git a/ops/staging-deploy.tmpl.yaml b/ops/staging-deploy.tmpl.yaml
index a2980f5..dc85da4 100644
--- a/ops/staging-deploy.tmpl.yaml
+++ b/ops/staging-deploy.tmpl.yaml
@@ -117,4 +117,6 @@ env:
     DB_PASSWORD: $DB_PASSWORD
     DB_PORT: 5432
     DB_USER: postgres
-    NAME: employee360
\ No newline at end of file
+    NAME: employee360
+    SECRET_KEY_BASE: $SECRET_KEY_BASE
+    HOST_URL: employee360-staging.notch8.cloud
\ No newline at end of file