Comment by ayi

Deploying them as ENV values and reading from env is the best practice as far as I know. But "deploying" part depends on your infrastructure.