diff --git a/.env.example b/.env.example
index abef758..eeac361 100644
--- a/.env.example
+++ b/.env.example
@@ -2,14 +2,14 @@
 # (no quotes, no shell expansion) — paste passwords with special chars as-is.
 
 # ── Source: PostgreSQL (the existing Fluxer fluxer_kv backend) ────────────────
-PG_HOST=10.1.10.36
+PG_HOST=CHANGEME
 PG_PORT=5432
 PG_USER=fluxer
 PG_PASSWORD=CHANGE_ME
 PG_DATABASE=fluxer
 
 # ── Destination: Apache Cassandra ────────────────────────────────────────────
-SCYLLA_HOSTS=10.1.10.38:9042
+SCYLLA_HOSTS=CHANGEME:9042
 SCYLLA_DC=atl
 CASSANDRA_USERNAME=fluxer
 CASSANDRA_PASSWORD=CHANGE_ME
diff --git a/migrate.mjs b/migrate.mjs
index e51e354..81748be 100644
--- a/migrate.mjs
+++ b/migrate.mjs
@@ -8,8 +8,8 @@
  *   3. PostgreSQL is still up and serving the original data
  *
  * Usage (prefer an --env-file with docker; values are taken literally):
- *   PG_HOST=10.1.10.36 PG_USER=fluxer PG_PASSWORD=... PG_DATABASE=fluxer \
- *   SCYLLA_HOSTS=10.1.10.38:9042 SCYLLA_DC=atl \
+ *   PG_HOST=CHANGEME PG_USER=fluxer PG_PASSWORD=... PG_DATABASE=fluxer \
+ *   SCYLLA_HOSTS=CHANGEME:9042 SCYLLA_DC=CHANGEME \
  *   CASSANDRA_USERNAME=fluxer CASSANDRA_PASSWORD=... \
  *   npm run dry-run      # verify without writing
  *   npm run migrate      # real migration
@@ -23,7 +23,7 @@ const { types: cassTypes, auth: cassAuth } = cassandra;
 
 // ── Configuration ──────────────────────────────────────────────────────────
 // PostgreSQL connection comes from PG_HOST/PG_PORT/PG_USER/PG_PASSWORD/PG_DATABASE (see main()).
-const SCYLLA_HOSTS = (process.env.SCYLLA_HOSTS ?? '10.1.10.X:9042').split(',');  // replace X
+const SCYLLA_HOSTS = (process.env.SCYLLA_HOSTS ?? 'CHANGEME:9042').split(',');
 const SCYLLA_DC    = process.env.SCYLLA_DC    ?? 'datacenter1';
 const KEYSPACE     = process.env.CASSANDRA_KEYSPACE ?? 'fluxer';
 const KV_TABLE     = process.env.KV_TABLE     ?? 'fluxer_kv';
@@ -229,14 +229,14 @@ async function main() {
   // PostgreSQL — component-based config so passwords with URL-special chars
   // (@, #, %, etc.) don't need percent-encoding; node-postgres handles them raw.
   const pgClient = new PgClient({
-    host:     process.env.PG_HOST ?? '10.1.10.36',
+    host:     process.env.PG_HOST ?? 'CHANGEME',
     port:     parseInt(process.env.PG_PORT ?? '5432'),
     user:     process.env.PG_USER ?? 'fluxer',
     password: process.env.PG_PASSWORD ?? '',
     database: process.env.PG_DATABASE ?? 'fluxer',
   });
   await pgClient.connect();
-  console.log(`PostgreSQL  ✓  ${process.env.PG_USER ?? 'fluxer'}@${process.env.PG_HOST ?? '10.1.10.36'}:${process.env.PG_PORT ?? '5432'}/${process.env.PG_DATABASE ?? 'fluxer'}`);
+  console.log(`PostgreSQL  ✓  ${process.env.PG_USER ?? 'fluxer'}@${process.env.PG_HOST ?? 'CHANGEME'}:${process.env.PG_PORT ?? '5432'}/${process.env.PG_DATABASE ?? 'fluxer'}`);
 
   // ScyllaDB
   const authProvider = process.env.CASSANDRA_USERNAME