Instead of managing a .env file on the server, I have begun the migration to Github secrets. This is a tes tto see if I can pass in the Google OAuth client secret. If so, then I can migrate the rest of the environment variables and manage them in one easy place.. I should still keep a record of these somewhere, encrypted, hidden, and safe.