Well combinations of all
Some main roles like apis and user access are in db
But functionality , personalizations are in confit files sometimes it is more then 1 for app
Like :
1 for thread pools and db connections
1 for logs
1 for functionality
Now each client has different config
Total mess