I am developing an [asp.net](http://asp.net) core app hosted in linux VPS, the same VPS will host the app and a postgreSQL DB. the app will need a connection string to connect to the database. I believe the postgreSQL connection string has a password in clear text. I need to get a hold of this connection string during app startup to connect to the DB. my question is: how to property secure/handle this connection string? I know is not secure to define this in appsettings.json so what are my options? I don't want to use a 3rd party service like azure keyvault. Can someone point me in the right direction? I am manually deploying the app in the var/www/app folder. I've heard that ENV variables is an option but not sure if this is a good idea. will they be gone on system reboot? what should i do to secure this connection string?