What is best way to handle configurations in production(securely)?

Configuration like various credentials (DB, Third party APIs, Services etc.).