It is soooooo easy for something that was just an experiment to get published somewhere, that I have learned (the hard way, multiple times) to never commit any

It is soooooo easy for something that was just an experiment to get published somewhere, that I have learned (the hard way, multiple times) to never commit any secrets to a git repo. Well, intentionally that is... but if I do it by mistake, I treat them as compromised and change them. Instead I just create a .env file and put them there. It's a bit more boilerplate but it is worth it when I don't need to decide between keeping secrets and having code history before publishing. And env vars are supported everywhere afaik.