98
I accidentally committed my API key to GitHub and now I'm paranoid.
What's the best way to:
- Store API keys in development?
- Store API keys in production?
- Rotate keys if they're compromised?
Is .env file enough? What about in a Docker container?