diff --git a/Makefile b/Makefile
index d5344941faf10788f62bd607b4d25d09f11dc673..1c7de0ac4f60a124975f9f192da19fb111c13bac 100644
--- a/Makefile
+++ b/Makefile
@@ -3,6 +3,11 @@ config ?= conf/faas-db.cnf
 include $(config)
 export $(shell sed 's/=.*//' $(config))
 
+credentials ?= conf/credentials/faas-db-default.cnf
+include $(credentials)
+export $(shell sed 's/=.*//' $(credentials))
+
+export FAAS_DB_IMAGE=${FAAS_DB_REPO}/${FAAS_DB_NAME}:${FAAS_DB_VERSION}
 
 .DEFAULT_GOAL := help
 
@@ -16,10 +21,10 @@ build-nc: # build container without caching
 	docker build --no-cache -t ${FAAS_DB_IMAGE} --build-arg FAAS_DB_NAME=${FAAS_DB_NAME} --build-arg FAAS_DB_IMAGE=${FAAS_DB_IMAGE} --build-arg FAAS_DB_VERSION=${FAAS_DB_VERSION} .
 
 run: # run container
-	docker run -i -t --detach --rm --env-file=$(config) -p=${FAAS_DB_PORT}:3306 --name="${FAAS_DB_NAME}" -v ${FAAS_DB_VOLUME_VAR_LIB_MYSQL}:/var/lib/mysql ${FAAS_DB_IMAGE}
+	docker run -i -t --detach --rm --env-file=$(config) --env-file=$(credentials) -p=${FAAS_DB_PORT}:3306 --name="${FAAS_DB_NAME}" -v ${FAAS_DB_VOLUME_VAR_LIB_MYSQL}:/var/lib/mysql ${FAAS_DB_IMAGE}
 
 run-nd: # run container in no-deamon mode
-	docker run -i -t --rm --env-file=$(config) -p=${FAAS_DB_PORT}:3306 --name="${FAAS_DB_NAME}" -v ${FAAS_DB_VOLUME_VAR_LIB_MYSQL}:/var/lib/mysql ${FAAS_DB_IMAGE}
+	docker run -i -t --env-file=$(config) --env-file=$(credentials) --rm -p=${FAAS_DB_PORT}:3306 --name="${FAAS_DB_NAME}" -v ${FAAS_DB_VOLUME_VAR_LIB_MYSQL}:/var/lib/mysql ${FAAS_DB_IMAGE}
 
 up: build run # build and run container
 
diff --git a/conf/credentials/.gitignore b/conf/credentials/.gitignore
new file mode 100644
index 0000000000000000000000000000000000000000..d93e641d6aa81b850602cb5f2f6de680428dda4c
--- /dev/null
+++ b/conf/credentials/.gitignore
@@ -0,0 +1 @@
+/faas-db-test.cnf
diff --git a/conf/credentials/.gitkeep b/conf/credentials/.gitkeep
new file mode 100644
index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391
diff --git a/conf/credentials/faas-db-default.cnf b/conf/credentials/faas-db-default.cnf
new file mode 100644
index 0000000000000000000000000000000000000000..f28eb17b64105ddf5f682d0ea3b1a7fb6b8210e5
--- /dev/null
+++ b/conf/credentials/faas-db-default.cnf
@@ -0,0 +1 @@
+MYSQL_ROOT_PASSWORD=changeme
\ No newline at end of file
diff --git a/conf/faas-db.cnf b/conf/faas-db.cnf
index e60dca321a091b5b9d3f26196ba87dd7701ace32..47088201bece812e31250f0ccebca1d575887d0c 100644
--- a/conf/faas-db.cnf
+++ b/conf/faas-db.cnf
@@ -2,10 +2,5 @@ FAAS_DB_REPO=faas
 FAAS_DB_VERSION=1.0-SNAPSHOT
 FAAS_DB_NAME=faas-db
 
-FAAS_DB_IMAGE=${FAAS_DB_REPO}/${FAAS_DB_NAME}:${FAAS_DB_VERSION}
-
 FAAS_DB_VOLUME_VAR_LIB_MYSQL=/tmp/faas-db
-FAAS_DB_PORT=8306
-
-# TODO - remove to external resource
-MYSQL_ROOT_PASSWORD=secure
+FAAS_DB_PORT=9306