diff --git a/deployment/backend.yml b/deployment/backend.yml
index 6fed19f..8b13789 100644
--- a/deployment/backend.yml
+++ b/deployment/backend.yml
@@ -1,8 +1 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: backend-config
-data:
-  DB_SERVER_HOST:
-  DB_SERVER_PORT:
 
diff --git a/deployment/frontend.yml b/deployment/frontend.yml
index e69de29..366b17a 100644
--- a/deployment/frontend.yml
+++ b/deployment/frontend.yml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: frontend-config
+data:
+  ZBX_SERVER_HOST: backend.zabbix.svc.cluster.local
diff --git a/deployment/namespace b/deployment/namespace
new file mode 100644
index 0000000..1f5a82f
--- /dev/null
+++ b/deployment/namespace
@@ -0,0 +1 @@
+zabbix
diff --git a/deployment/roll-db-credential.sh b/deployment/roll-db-credential.sh
new file mode 100755
index 0000000..6804277
--- /dev/null
+++ b/deployment/roll-db-credential.sh
@@ -0,0 +1,49 @@
+#!/bin/bash
+
+. ../../ENVDB
+
+DATABASE=zabbix
+LOGIN=zabbix
+PASSWORD=`openssl rand -base64 24`
+NAMESPACE=$(cat namespace)
+
+ARG1=$1
+
+if [ "$ARG1" = "initial" ]; then
+psql <<EOF
+do
+\$\$
+begin
+  CREATE USER $LOGIN;
+  COMMIT;
+  CREATE DATABASE $DATABASE WITH OWNER $LOGIN;
+end
+\$\$
+;
+commit;
+EOF
+fi
+
+psql <<EOF
+do
+\$\$
+begin
+  ALTER USER $LOGIN WITH PASSWORD '$PASSWORD';
+  GRANT ALL PRIVILEGES ON DATABASE $DATABASE TO $LOGIN;
+end
+\$\$
+;
+commit;
+EOF
+
+kubectl create secret generic database-cred \
+  --dry-run=client \
+  -o yaml \
+  --save-config \
+  --from-literal=POSTGRES_USER="$LOGIN" \
+  --from-literal=POSTGRES_PASSWORD="$PASSWORD" | \
+  --from-literal=POSTGRES_DB="$DATABASE" | \
+  --from-literal=DB_SERVER_HOST="timescaledb.database.svc.cluster.local" | \
+kubectl apply -f - -n $NAMESPACE
+
+