database configuration should be stored in environment to make them
invisible outside