diff --git a/srv/src/main/java/my/bookshop/config/WebSecurityConfig.java b/srv/src/main/java/my/bookshop/config/WebSecurityConfig.java
index 3c84b089..2bd1a714 100644
--- a/srv/src/main/java/my/bookshop/config/WebSecurityConfig.java
+++ b/srv/src/main/java/my/bookshop/config/WebSecurityConfig.java
@@ -16,6 +16,8 @@ protected void configure(HttpSecurity http) throws Exception {
 		http.requestMatchers() //
 				.antMatchers("/actuator/health") //
 				.antMatchers("/swagger/**") //
+				.antMatchers("/h2/**") //
+				.and().headers().frameOptions().disable()
 				.and().csrf().disable().authorizeRequests().anyRequest().permitAll();
 	}
 }
diff --git a/srv/src/main/resources/application.yaml b/srv/src/main/resources/application.yaml
index e8f30ce3..46403e2f 100644
--- a/srv/src/main/resources/application.yaml
+++ b/srv/src/main/resources/application.yaml
@@ -3,6 +3,10 @@ logging:
   level:
     '[com.sap.cds.auditlog]': DEBUG
 spring:
+  datasource.url: jdbc:h2:mem:demodb
+  h2.console:
+    enabled: true
+    path: "/h2"
   web.resources.static-locations: "file:./app"
   jmx:
     enabled: true