diff --git a/docker-compose.yml b/docker-compose.yml
index 5d48fe2..bf9fea4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,3 +1,5 @@
+version: '3.8'
+
 volumes:
   lago_postgres_data:
   lago_redis_data:
@@ -9,26 +11,26 @@ services:
     container_name: lago-db
     restart: unless-stopped
     environment:
-      POSTGRES_DB: ${POSTGRES_DB:-lago}
-      POSTGRES_USER: ${POSTGRES_USER:-lago}
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
-      PGDATA: /data/postgres
-      PGPORT: ${POSTGRES_PORT:-5432}
-      POSTGRES_SCHEMA: public
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      PGDATA: ${PGDATA}
+      PGPORT: ${POSTGRES_PORT}
+      POSTGRES_SCHEMA: ${POSTGRES_SCHEMA}
     volumes:
       - lago_postgres_data:/data/postgres
     ports:
-      - ${POSTGRES_PORT:-5432}:${POSTGRES_PORT:-5432}
+      - ${POSTGRES_PORT}:${POSTGRES_PORT}
 
   redis:
     image: redis:6-alpine
     container_name: lago-redis
     restart: unless-stopped
-    command: --port ${REDIS_PORT:-6379}
+    command: --port ${REDIS_PORT}
     volumes:
       - lago_redis_data:/data
     ports:
-      - ${REDIS_PORT:-6379}:${REDIS_PORT:-6379}
+      - ${REDIS_PORT}:${REDIS_PORT}
 
   api:
     container_name: lago-api
@@ -46,48 +48,48 @@ services:
       # uncomment for a potentially faster startup if you have docker --version > 25.0.0
       # start_interval: 2s
     environment:
-      - LAGO_API_URL=${LAGO_API_URL:-http://localhost:3000}
-      - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-      - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
+      - LAGO_API_URL=${LAGO_API_URL}
+      - DATABASE_URL=${DATABASE_URL}
+      - REDIS_URL=${REDIS_URL}
       - REDIS_PASSWORD=${REDIS_PASSWORD}
-      - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-      - RAILS_ENV=production
-      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT:-true}
+      - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+      - RAILS_ENV=${RAILS_ENV}
+      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT}
       - SENTRY_DSN=${SENTRY_DSN}
-      - LAGO_FRONT_URL=${LAGO_FRONT_URL:-http://localhost}
-      - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
+      - LAGO_FRONT_URL=${LAGO_FRONT_URL}
+      - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
       - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
       - LAGO_SIDEKIQ_WEB=${LAGO_SIDEKIQ_WEB}
-      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY:-your-encryption-primary-key}
-      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY:-your-encryption-deterministic-key}
-      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT:-your-encryption-derivation-salt}
-      - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3:-false}
-      - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID:-azerty123456}
-      - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY:-azerty123456}
-      - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION:-us-east-1}
-      - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET:-bucket}
+      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY}
+      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY}
+      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT}
+      - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3}
+      - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID}
+      - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY}
+      - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION}
+      - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET}
       - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
-      - LAGO_USE_GCS=${LAGO_USE_GCS:-false}
-      - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT:-}
-      - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET:-}
-      - LAGO_PDF_URL=${LAGO_PDF_URL:-http://pdf:3000}
-      - LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST:-redis}:${LAGO_REDIS_CACHE_PORT:-6379}
+      - LAGO_USE_GCS=${LAGO_USE_GCS}
+      - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT}
+      - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET}
+      - LAGO_PDF_URL=${LAGO_PDF_URL}
+      - LAGO_REDIS_CACHE_URL=${LAGO_REDIS_CACHE_URL}
       - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
       - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
       - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
-      - LAGO_OAUTH_PROXY_URL=https://proxy.getlago.com
-      - LAGO_LICENSE=${LAGO_LICENSE:-}
-      - GOOGLE_AUTH_CLIENT_ID=${GOOGLE_AUTH_CLIENT_ID:-}
-      - GOOGLE_AUTH_CLIENT_SECRET=${GOOGLE_AUTH_CLIENT_SECRET:-}
-      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
-      # - SIDEKIQ_EVENTS=true
-      # - SIDEKIQ_PDFS=true
+      - LAGO_OAUTH_PROXY_URL=${LAGO_OAUTH_PROXY_URL}
+      - LAGO_LICENSE=${LAGO_LICENSE}
+      - GOOGLE_AUTH_CLIENT_ID=${GOOGLE_AUTH_CLIENT_ID}
+      - GOOGLE_AUTH_CLIENT_SECRET=${GOOGLE_AUTH_CLIENT_SECRET}
+      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
+      # - SIDEKIQ_EVENTS=${SIDEKIQ_EVENTS}
+      # - SIDEKIQ_PDFS=${SIDEKIQ_PDFS}
     volumes:
       - lago_storage_data:/app/storage
       # If using GCS, you need to put the credentials keyfile here
-      #- gcs_keyfile.json:/app/gcs_keyfile.json
+      # - gcs_keyfile.json:/app/gcs_keyfile.json
     ports:
-      - ${API_PORT:-3000}:3000
+      - ${API_PORT}:3000
 
   front:
     container_name: lago-front
@@ -99,15 +101,15 @@ services:
       api:
         condition: service_healthy
     environment:
-      - API_URL=${LAGO_API_URL:-http://localhost:3000}
-      - APP_ENV=${APP_ENV:-production}
-      - LAGO_DISABLE_SIGNUP=${LAGO_DISABLE_SIGNUP:-false}
-      - LAGO_OAUTH_PROXY_URL=https://proxy.getlago.com
+      - API_URL=${LAGO_API_URL}
+      - APP_ENV=${APP_ENV}
+      - LAGO_DISABLE_SIGNUP=${LAGO_DISABLE_SIGNUP}
+      - LAGO_OAUTH_PROXY_URL=${LAGO_OAUTH_PROXY_URL}
       - SENTRY_DSN=${SENTRY_DSN_FRONT}
-      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
+      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
     ports:
-      - ${FRONT_PORT:-80}:80
-    #  - 443:443
+      - ${FRONT_PORT}:80
+      # - 443:443
     # Using SSL with Let's Encrypt
     # volumes:
     #   - ./extra/nginx-letsencrypt.conf:/etc/nginx/conf.d/default.conf
@@ -139,126 +141,126 @@ services:
     healthcheck:
       test: ['CMD-SHELL', 'bundle exec sidekiqmon | grep $(hostname) || exit 1']
     environment:
-      - LAGO_API_URL=${LAGO_API_URL:-http://localhost:3000}
-      - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-      - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
+      - LAGO_API_URL=${LAGO_API_URL}
+      - DATABASE_URL=${DATABASE_URL}
+      - REDIS_URL=${REDIS_URL}
       - REDIS_PASSWORD=${REDIS_PASSWORD}
-      - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-      - RAILS_ENV=production
-      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT:-true}
+      - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+      - RAILS_ENV=${RAILS_ENV}
+      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT}
       - SENTRY_DSN=${SENTRY_DSN}
       - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-      - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY:-your-encryption-primary-key}
-      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY:-your-encryption-deterministic-key}
-      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT:-your-encryption-derivation-salt}
-      - LAGO_FRONT_URL=${LAGO_FRONT_URL:-http://localhost}
-      - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3:-false}
-      - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID:-azerty123456}
-      - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY:-azerty123456}
-      - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION:-us-east-1}
-      - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET:-bucket}
+      - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
+      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY}
+      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY}
+      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT}
+      - LAGO_FRONT_URL=${LAGO_FRONT_URL}
+      - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3}
+      - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID}
+      - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY}
+      - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION}
+      - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET}
       - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
-      - LAGO_USE_GCS=${LAGO_USE_GCS:-false}
-      - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT:-}
-      - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET:-}
-      - LAGO_PDF_URL=${LAGO_PDF_URL:-http://pdf:3000}
-      - LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST:-redis}:${LAGO_REDIS_CACHE_PORT:-6379}
+      - LAGO_USE_GCS=${LAGO_USE_GCS}
+      - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT}
+      - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET}
+      - LAGO_PDF_URL=${LAGO_PDF_URL}
+      - LAGO_REDIS_CACHE_URL=${LAGO_REDIS_CACHE_URL}
       - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
       - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
       - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
-      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
-      - LAGO_LICENSE=${LAGO_LICENSE:-}
-      # - SIDEKIQ_EVENTS=true
-      # - SIDEKIQ_PDFS=true
+      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
+      - LAGO_LICENSE=${LAGO_LICENSE}
+      # - SIDEKIQ_EVENTS=${SIDEKIQ_EVENTS}
+      # - SIDEKIQ_PDFS=${SIDEKIQ_PDFS}
     volumes:
       - lago_storage_data:/app/storage
 
   # You can uncomment this if you want to use a dedicated Sidekiq worker for the event ingestion.
   # It is recommendend if you have a high usage of events to not impact the other Sidekiq Jobs.
-  #api-events-worker:
-  #  container_name: lago-events-worker
-  #  image: getlago/api:v1.12.2
-  #  restart: unless-stopped
-  #  depends_on:
-  #    api:
-  #      condition: service_healthy
-  #  command: ["./scripts/start.events.worker.sh"]
-  #  environment:
-  #    - LAGO_API_URL=${LAGO_API_URL:-http://localhost:3000}
-  #    - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-  #    - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
-  #    - REDIS_PASSWORD=${REDIS_PASSWORD}
-  #    - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-  #    - RAILS_ENV=production
-  #    - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT:-true}
-  #    - SENTRY_DSN=${SENTRY_DSN}
-  #    - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-  #    - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-  #    - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY:-your-encryption-primary-key}
-  #    - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY:-your-encryption-deterministic-key}
-  #    - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT:-your-encryption-derivation-salt}
-  #    - LAGO_FRONT_URL=${LAGO_FRONT_URL:-http://localhost}
-  #    - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3:-false}
-  #    - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID:-azerty123456}
-  #    - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY:-azerty123456}
-  #    - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION:-us-east-1}
-  #    - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET:-bucket}
-  #    - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
-  #    - LAGO_USE_GCS=${LAGO_USE_GCS:-false}
-  #    - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT:-}
-  #    - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET:-}
-  #    - LAGO_PDF_URL=${LAGO_PDF_URL:-http://pdf:3000}
-  #    - LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST:-redis}:${LAGO_REDIS_CACHE_PORT:-6379}
-  #    - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
-  #    - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
-  #    - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
-  #    - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
-  #    - SIDEKIQ_EVENTS=true
-  #    - LAGO_LICENSE=${LAGO_LICENSE:-}
+  # api-events-worker:
+  #   container_name: lago-events-worker
+  #   image: getlago/api:v1.12.2
+  #   restart: unless-stopped
+  #   depends_on:
+  #     api:
+  #       condition: service_healthy
+  #   command: ["./scripts/start.events.worker.sh"]
+  #   environment:
+  #     - LAGO_API_URL=${LAGO_API_URL}
+  #     - DATABASE_URL=${DATABASE_URL}
+  #     - REDIS_URL=${REDIS_URL}
+  #     - REDIS_PASSWORD=${REDIS_PASSWORD}
+  #     - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+  #     - RAILS_ENV=${RAILS_ENV}
+  #     - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT}
+  #     - SENTRY_DSN=${SENTRY_DSN}
+  #     - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
+  #     - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
+  #     - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY}
+  #     - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY}
+  #     - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT}
+  #     - LAGO_FRONT_URL=${LAGO_FRONT_URL}
+  #     - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3}
+  #     - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID}
+  #     - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY}
+  #     - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION}
+  #     - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET}
+  #     - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
+  #     - LAGO_USE_GCS=${LAGO_USE_GCS}
+  #     - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT}
+  #     - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET}
+  #     - LAGO_PDF_URL=${LAGO_PDF_URL}
+  #     - LAGO_REDIS_CACHE_URL=${LAGO_REDIS_CACHE_URL}
+  #     - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
+  #     - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
+  #     - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
+  #     - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
+  #     - SIDEKIQ_EVENTS=true
+  #     - LAGO_LICENSE=${LAGO_LICENSE}
 
   # You can uncomment this if you want to use a dedicated Sidekiq worker for the invoices pdf creation.
   # It is recommended if you have a high usage of invoices being created to not impact the other Sidekiq Jobs.
-  #api-pdfs-worker:
-  #  container_name: lago-pdfs-worker
-  #  image: getlago/api:v1.12.2
-  #  restart: unless-stopped
-  #  depends_on:
-  #    api:
-  #      condition: service_healthy
-  #  command: ["./scripts/start.pdfs.worker.sh"]
-  #  environment:
-  #    - LAGO_API_URL=${LAGO_API_URL:-http://localhost:3000}
-  #    - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-  #    - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
-  #    - REDIS_PASSWORD=${REDIS_PASSWORD}
-  #    - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-  #    - RAILS_ENV=production
-  #    - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT:-true}
-  #    - SENTRY_DSN=${SENTRY_DSN}
-  #    - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-  #    - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-  #    - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY:-your-encryption-primary-key}
-  #    - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY:-your-encryption-deterministic-key}
-  #    - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT:-your-encryption-derivation-salt}
-  #    - LAGO_FRONT_URL=${LAGO_FRONT_URL:-http://localhost}
-  #    - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3:-false}
-  #    - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID:-azerty123456}
-  #    - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY:-azerty123456}
-  #    - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION:-us-east-1}
-  #    - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET:-bucket}
-  #    - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
-  #    - LAGO_USE_GCS=${LAGO_USE_GCS:-false}
-  #    - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT:-}
-  #    - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET:-}
-  #    - LAGO_PDF_URL=${LAGO_PDF_URL:-http://pdf:3000}
-  #    - LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST:-redis}:${LAGO_REDIS_CACHE_PORT:-6379}
-  #    - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
-  #    - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
-  #    - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
-  #    - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
-  #    - SIDEKIQ_PDFS=true
-  #    - LAGO_LICENSE=${LAGO_LICENSE:-}
+  # api-pdfs-worker:
+  #   container_name: lago-pdfs-worker
+  #   image: getlago/api:v1.12.2
+  #   restart: unless-stopped
+  #   depends_on:
+  #     api:
+  #       condition: service_healthy
+  #   command: ["./scripts/start.pdfs.worker.sh"]
+  #   environment:
+  #     - LAGO_API_URL=${LAGO_API_URL}
+  #     - DATABASE_URL=${DATABASE_URL}
+  #     - REDIS_URL=${REDIS_URL}
+  #     - REDIS_PASSWORD=${REDIS_PASSWORD}
+  #     - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+  #     - RAILS_ENV=${RAILS_ENV}
+  #     - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT}
+  #     - SENTRY_DSN=${SENTRY_DSN}
+  #     - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
+  #     - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
+  #     - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY}
+  #     - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY}
+  #     - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT}
+  #     - LAGO_FRONT_URL=${LAGO_FRONT_URL}
+  #     - LAGO_USE_AWS_S3=${LAGO_USE_AWS_S3}
+  #     - LAGO_AWS_S3_ACCESS_KEY_ID=${LAGO_AWS_S3_ACCESS_KEY_ID}
+  #     - LAGO_AWS_S3_SECRET_ACCESS_KEY=${LAGO_AWS_S3_SECRET_ACCESS_KEY}
+  #     - LAGO_AWS_S3_REGION=${LAGO_AWS_S3_REGION}
+  #     - LAGO_AWS_S3_BUCKET=${LAGO_AWS_S3_BUCKET}
+  #     - LAGO_AWS_S3_ENDPOINT=${LAGO_AWS_S3_ENDPOINT}
+  #     - LAGO_USE_GCS=${LAGO_USE_GCS}
+  #     - LAGO_GCS_PROJECT=${LAGO_GCS_PROJECT}
+  #     - LAGO_GCS_BUCKET=${LAGO_GCS_BUCKET}
+  #     - LAGO_PDF_URL=${LAGO_PDF_URL}
+  #     - LAGO_REDIS_CACHE_URL=${LAGO_REDIS_CACHE_URL}
+  #     - LAGO_REDIS_CACHE_PASSWORD=${LAGO_REDIS_CACHE_PASSWORD}
+  #     - LAGO_DISABLE_SEGMENT=${LAGO_DISABLE_SEGMENT}
+  #     - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
+  #     - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
+  #     - SIDEKIQ_PDFS=true
+  #     - LAGO_LICENSE=${LAGO_LICENSE}
 
   api-clock:
     container_name: lago-clock
@@ -269,23 +271,23 @@ services:
         condition: service_healthy
     command: ['./scripts/start.clock.sh']
     environment:
-      - LAGO_API_URL=${LAGO_API_URL:-http://localhost:3000}
-      - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-      - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
+      - LAGO_API_URL=${LAGO_API_URL}
+      - DATABASE_URL=${DATABASE_URL}
+      - REDIS_URL=${REDIS_URL}
       - REDIS_PASSWORD=${REDIS_PASSWORD}
-      - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-      - RAILS_ENV=production
-      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT:-true}
+      - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+      - RAILS_ENV=${RAILS_ENV}
+      - RAILS_LOG_TO_STDOUT=${LAGO_RAILS_STDOUT}
       - SENTRY_DSN=${SENTRY_DSN}
       - LAGO_DISABLE_WALLET_REFRESH=${LAGO_DISABLE_WALLET_REFRESH}
-      - LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST:-redis}:${LAGO_REDIS_CACHE_PORT:-6379}
+      - LAGO_REDIS_CACHE_URL=${LAGO_REDIS_CACHE_URL}
       - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-      - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY:-your-encryption-primary-key}
-      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY:-your-encryption-deterministic-key}
-      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT:-your-encryption-derivation-salt}
-      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY:-}
-      - LAGO_LICENSE=${LAGO_LICENSE:-}
+      - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
+      - LAGO_ENCRYPTION_PRIMARY_KEY=${LAGO_ENCRYPTION_PRIMARY_KEY}
+      - LAGO_ENCRYPTION_DETERMINISTIC_KEY=${LAGO_ENCRYPTION_DETERMINISTIC_KEY}
+      - LAGO_ENCRYPTION_KEY_DERIVATION_SALT=${LAGO_ENCRYPTION_KEY_DERIVATION_SALT}
+      - NANGO_SECRET_KEY=${NANGO_SECRET_KEY}
+      - LAGO_LICENSE=${LAGO_LICENSE}
 
   pdf:
     image: getlago/lago-gotenberg:7.8.2
@@ -300,10 +302,10 @@ services:
     volumes:
       - lago_storage_data:/app/storage
     environment:
-      - RAILS_ENV=production
-      - SECRET_KEY_BASE=${SECRET_KEY_BASE:-your-secret-key-base-hex-64}
-      - RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
+      - RAILS_ENV=${RAILS_ENV}
+      - SECRET_KEY_BASE=${SECRET_KEY_BASE}
+      - RSA_PRIVATE_KEY=${RSA_PRIVATE_KEY} # Should be base64 encoded
       - LAGO_RSA_PRIVATE_KEY=${LAGO_RSA_PRIVATE_KEY} # Should be base64 encoded
-      - DATABASE_URL=postgresql://${POSTGRES_USER:-lago}:${POSTGRES_PASSWORD:-changeme}@${POSTGRES_HOST:-db}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-lago}?search_path=${POSTGRES_SCHEMA:-public}
-      - REDIS_URL=redis://${REDIS_HOST:-redis}:${REDIS_PORT:-6379}
+      - DATABASE_URL=${DATABASE_URL}
+      - REDIS_URL=${REDIS_URL}
       - REDIS_PASSWORD=${REDIS_PASSWORD}
diff --git a/env b/env
new file mode 100644
index 0000000..c54c7dd
--- /dev/null
+++ b/env
@@ -0,0 +1,57 @@
+# PostgreSQL Configuration
+POSTGRES_DB=lago
+POSTGRES_USER=lago
+POSTGRES_PASSWORD=changeme
+POSTGRES_PORT=5432
+POSTGRES_HOST=db
+POSTGRES_SCHEMA=public
+PGDATA=/data/postgres
+
+# Redis Configuration
+REDIS_PORT=6379
+REDIS_HOST=redis
+REDIS_PASSWORD=
+
+# Lago API Configuration
+LAGO_API_URL=http://localhost:3000
+DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?search_path=${POSTGRES_SCHEMA}
+REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}
+SECRET_KEY_BASE=your-secret-key-base-hex-64
+RAILS_ENV=production
+LAGO_RAILS_STDOUT=true
+SENTRY_DSN=
+LAGO_FRONT_URL=http://localhost
+RSA_PRIVATE_KEY=
+LAGO_RSA_PRIVATE_KEY=
+LAGO_SIDEKIQ_WEB=
+LAGO_ENCRYPTION_PRIMARY_KEY=your-encryption-primary-key
+LAGO_ENCRYPTION_DETERMINISTIC_KEY=your-encryption-deterministic-key
+LAGO_ENCRYPTION_KEY_DERIVATION_SALT=your-encryption-derivation-salt
+LAGO_USE_AWS_S3=false
+LAGO_AWS_S3_ACCESS_KEY_ID=azerty123456
+LAGO_AWS_S3_SECRET_ACCESS_KEY=azerty123456
+LAGO_AWS_S3_REGION=us-east-1
+LAGO_AWS_S3_BUCKET=bucket
+LAGO_AWS_S3_ENDPOINT=
+LAGO_USE_GCS=false
+LAGO_GCS_PROJECT=
+LAGO_GCS_BUCKET=
+LAGO_PDF_URL=http://pdf:3000
+LAGO_REDIS_CACHE_HOST=redis
+LAGO_REDIS_CACHE_PORT=6379
+LAGO_REDIS_CACHE_PASSWORD=
+LAGO_REDIS_CACHE_URL=redis://${LAGO_REDIS_CACHE_HOST}:${LAGO_REDIS_CACHE_PORT}
+LAGO_DISABLE_SEGMENT=
+LAGO_DISABLE_WALLET_REFRESH=
+LAGO_OAUTH_PROXY_URL=https://proxy.getlago.com
+LAGO_LICENSE=
+GOOGLE_AUTH_CLIENT_ID=
+GOOGLE_AUTH_CLIENT_SECRET=
+NANGO_SECRET_KEY=
+SIDEKIQ_EVENTS=
+SIDEKIQ_PDFS=
+API_PORT=3000
+FRONT_PORT=80
+APP_ENV=production
+LAGO_DISABLE_SIGNUP=false
+SENTRY_DSN_FRONT=