db endpoint — use :6432/:6433 with TLS