dontenvx solves this by encrypting your .env file so you can even commit it safely