Configuration in Compose
Environment variables can be declared directly, loaded from an environment file, or supplied from the shell. Keep non-secret configuration separate from application code.
Do not commit real credentials to Git. Use a local .env only for appropriate development values and use a proper secret mechanism for production credentials.