Comment by dangero

Where is the right place to store db passwords, api keys, etc? What is best practice in this area?