Thanks! Glad you liked the post.

Very good point indeed!

However, I have included the config.py file in the .gitignore so that it is not uploaded to the repo anyway. As you suggested, using GitLab secrets is probably the most convenient way but since I pushed to my GitHub repo I went for the config file approach.