move db creds to env vars