postgresql host doesn't need to be secret