all services secrets seems to be neatly packed in per service ./.settings.env files. But there seems to be no placeholders or alike. Would you be so kind to provide them, e.g. doing smth like
sed 's/^\([A-Za-z_][A-Za-z0-9_]*\)=[^#]*/\1=... /' .settings.env > .settings.env.template
after .gitignore'ing .settings.env altogether to not commit .