# Configuration Best Practices - External config files (not hardcoded) - Environment-specific overrides - Validation at startup - Secure secrets (vault, env vars) - Document all config options