Nobody mentioned the fact that _you don't put secrets in a versioning system_. .gitignore the configuration files and have example files available, or use confi

Nobody mentioned the fact that _you don't put secrets in a versioning system_. .gitignore the configuration files and have example files available, or use configuration files that can import the missing parts (the secrets) from an ignored file. Another way is to put the secrets in environment variables outside the project. In any way, if they're missing provide a meaningful message to the developer. I do understand that you must keep some of these secrets available somewhere: just don't version them.