diff --git a/apps/canvas/back/.env b/apps/canvas/back/.env
new file mode 100644
index 0000000..5173186
--- /dev/null
+++ b/apps/canvas/back/.env
@@ -0,0 +1,3 @@
+DATABASE_URL=file:${DODO_VOLUME_DATA}/dodo.db
+PUBLIC_ADDR=https://canvas.v1.dodo.cloud
+INTERNAL_API_ADDR=http://canvas.hgrz-dodo-app-gry.svc.cluster.local:8081
\ No newline at end of file
diff --git a/apps/canvas/back/.gitignore b/apps/canvas/back/.gitignore
index 11ddd8d..3c3629e 100644
--- a/apps/canvas/back/.gitignore
+++ b/apps/canvas/back/.gitignore
@@ -1,3 +1 @@
 node_modules
-# Keep environment variables out of version control
-.env
diff --git a/apps/canvas/back/prisma/schema.prisma b/apps/canvas/back/prisma/schema.prisma
index 68ff022..c8c834b 100644
--- a/apps/canvas/back/prisma/schema.prisma
+++ b/apps/canvas/back/prisma/schema.prisma
@@ -10,7 +10,7 @@
 
 datasource db {
   provider = "sqlite"
-  url      = "file:/home/gio/dodo.db" // TODO(gio): make configurable
+  url      = env("DATABASE_URL")
 }
 
 model Project {
diff --git a/apps/canvas/back/src/index.ts b/apps/canvas/back/src/index.ts
index 76e250a..5ab90ef 100644
--- a/apps/canvas/back/src/index.ts
+++ b/apps/canvas/back/src/index.ts
@@ -491,8 +491,7 @@
 		resp.status(200);
 		resp.write(
 			JSON.stringify({
-				// TODO(gio): get from env or command line flags
-				managerAddr: "http://10.42.0.95:8081",
+				managerAddr: env.INTERNAL_API_ADDR,
 				deployKey: project.deployKey,
 				access: JSON.parse(project.access ?? "[]"),
 				integrations: {
diff --git a/apps/canvas/back/start.sh b/apps/canvas/back/start.sh
deleted file mode 100755
index 23bc786..0000000
--- a/apps/canvas/back/start.sh
+++ /dev/null
@@ -1 +0,0 @@
-DODO_PORT_WEB=8080 DODO_PORT_API=8081 npm run start