diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -2001,6 +2001,10 @@
 swh::deploy::webapp::backend::http_timeout: 3600
 swh::deploy::webapp::backend::reload_mercy: 3600
 
+swh::deploy::webapp::db::host: db.internal.softwareheritage.org
+swh::deploy::webapp::db::user: swh-web
+swh::deploy::webapp::db::name: swh-web
+# swh::deploy::webapp::db::password in private data
 swh::deploy::webapp::reverse_proxy::backend_http_port: "%{alias('varnish::backend_http_port')}"
 
 # aliases are pulled from letsencrypt::certificates[$swh::deploy::webapp::vhost::letsencrypt_cert]
diff --git a/data/deployments/staging/common.yaml b/data/deployments/staging/common.yaml
--- a/data/deployments/staging/common.yaml
+++ b/data/deployments/staging/common.yaml
@@ -27,6 +27,9 @@
 swh::deploy::worker::lister::db::user: swh-lister
 swh::deploy::worker::lister::db::name: swh-lister
 
+swh::deploy::webapp::db::host: db.internal.softwareheritage.org
+# swh::deploy::webapp::db::password in private data
+
 swh::deploy::worker::instances:
   - checker_deposit
   - loader_archive
@@ -203,6 +206,9 @@
     name: clearly-defined-full
     user: clearly-defined
     password: "%{lookup('swh::deploy::clearly_defined::db::password')}"
+  webapp:
+    name: swh-web
+    user: swh-web
 
 pgbouncer::auth_hba_file: "/etc/postgresql/%{lookup('swh::postgresql::cluster_name')}/pg_hba.conf"
 pgbouncer::common::listen_addresses:
@@ -248,6 +254,11 @@
     auth_user: postgres
     port: 5433
     alias: staging-clearly-defined-full
+  - source_db: swh-web
+    host: localhost
+    auth_user: postgres
+    port: 5433
+    alias: staging-swh-web
 
 # open objstorage api
 swh::deploy::objstorage::backend::listen::host: 0.0.0.0