Comment by ragnarel

Alternatively, you can encrypt the `.env` file before committing it. Then, only a single key will need to be configured in the destination environment.