Secrets in the environment
Configuration that differs per machine goes in the environment, not in a file in the repository. A secret committed to a file is visible to every reader of the repository, and the environment is the ordinary place it belongs.
A missing variable is a crash
A program that expects a variable and gets nothing usually fails with a message that names the variable. That failure is the design working; the fix is to set it, not to change the program.