git deployment

How do you manage .env secrets when deploying Compose stacks from Git?

I want to keep my Docker Compose stacks in a Git repository and deploy them to a server. If the .env files stay out of Git, how do…