migrate variables to var file

instead of using env vars, use a config file that can be stored in /etc with only the perms of the scanner/server requiring access.