pwa

Keep confidential information out of the config file Never put confidential information in the configuration file. In particular, please do not place any shared authorization tokens or private keys in the configuration files. As convenient and tempting as it is, it is much better to use ENV variables (only accessible from server side modules), another config file that will not be included in the CSR code, so Webpack will not bundle it.