Hacker News Reader

.gitignore helps

What about API_KEY='42..' in a config file that contains project-wide configuration?

You split your config into separate files for sensitive and non-sensitive values.