move passwords to a different file and enable apache certs