always clone in order to mimic production
move testing db secret to a saner place
33.33.33.110 is not a reserved ip. use a private ip.
rip out environments that are unneeded