use env for db pass