Once there is no ".env" file needed for your build and deploy, you can simply create an env.json or env.ts file with your sensitive variables and add this file to .gitignore