It depends on the platform you're using, but basically wherever you would store your secrets currently (API keys, database credentials, etc.) is where you should store your server ENVKEY.