11 lines
274 B
Markdown
11 lines
274 B
Markdown
## Secrets Management
|
|
|
|
**NEVER hardcode secrets.** Use `.env` files (gitignored) or a secrets manager.
|
|
|
|
```bash
|
|
# .env.example is committed (with placeholders)
|
|
# .env is NOT committed (contains real values)
|
|
```
|
|
|
|
Ensure `.gitignore` includes `.env*` (except `.env.example`).
|