and of course if you're on aws you could use one of their services https://aws.amazon.com/secrets-manager/