secrets.yml
This file is used only when discord.token-source is SECRETS.YML.
config-version: 4
generated-by-version: "2.5.2"
discord-token: ""
An environment variable is safer because the token does not need to be stored in the plugin directory. When a file is unavoidable, restrict it to the server account and exclude it from public backups, screenshots and support archives.