I've read a bunch of tutorials promoting env vars to avoid secrets being accidentally checked into git. Step 1 is usually to create a .env file and add it to your gitignore.