Is to NOT USE THEM!
I can not say it any better than Gregory Gaines does in this article.
dev.to/gregorygaines/stop-using-env-files-now-kp0
.env files are yet another tutorial shortcut that became "best practices" because of lack of comprehension, just like putting I iprefix and Impl suffixes.