schematic/settings: store mysql password in env