Externalize configuration

Externalize the main config file and make it configured by an environment variable-simplifying deployment.

Remanining problem though: How can we correctly integrate the security-context depending on the build?

(from redmine: issue id 98, created on 2018-01-22tgradl, closed on 2018-01-22)