move over to sqlite3 storage

schemas/config.json

@@ -145,14 +145,18 @@
 					]
 				},
 				"client_id": {
-					"title": "",
+					"title": "OAuth2 client ID",
 					"description": "",
 					"type": "string"
 				},
 				"client_secret": {
-					"title": "",
-					"description": "",
-					"type": "string"
+					"allOf": [
+            {
+              "title": "OAuth2 client secret",
+              "description": ""
+            },
+            { "$ref": "#/$defs/secret_value" }
+          ]
 				}
 			}
 		},
@@ -212,6 +216,15 @@
 					"description": "Time-to-live for the session key cookie (in seconds)",
 					"type": "integer",
 					"default": 7200
+				},
+				"pepper": {
+					"allOf": [
+            {
+              "title": "Session key hashing pepper",
+              "description": "Cryptographic 'pepper' (or 'secret salt') value, appended to sessions keys before hashing"
+            },
+            { "$ref": "#/$defs/secret_value" }
+          ]
 				}
 			}
 		},
@@ -273,6 +286,29 @@
 			"required": [
 				"engine"
 			]
-		}
+		},
+    "secret_value": {
+      "oneOf": [
+        { "$ref": "#/$defs/env_var" },
+        {
+          "title": "",
+          "description": "",
+          "type": "string"
+        }
+      ]
+    },
+    "env_var": {
+      "type": "object",
+      "properties": {
+        "from_env": {
+          "title": "",
+          "description": "",
+          "type": "string"
+        }
+      },
+      "required": [
+        "from_env"
+      ]
+    }
 	}
 }