externalize configuration (datasource, ldap)