You already know that it’s not a good idea to publicly expose any sensitive data in your project files. A more secure approach is to store all your sensitive info in environment variables.