title: Postgres database security: what to store in environment variables?
body: <p>There is a Postgres database that I connect to with SQLAlchemy.</p>
  
  <p>I currently have the database's connection parameters (database name, host, port, username, password) all hard coded in the Python file.  I want to change that.</p>
  
  <p>I read <a href="https://www.learndatasci.com/tutorials/using-databases-python-postgres-sqlalchemy-and-alembic/" rel="nofollow noreferrer">here</a> that one should store these parameters in environment variables.  Of the five connection parameters, what should I store in environment variables?</p>
  
  <p>Obviously I will store password, but should I additionally store username and host?  What is the convention here?</p>