move postgres subnets to config file