yep, that's correct for basic configuration, though you should be able to override that with

patches

if you need to. Are you looking at storing the datastore_uri in a secret store or something like that?