Best practice for storing sensitive connection data when connecting to a DB

Question

I have always done my DB connection through a file like "connection.js" and it contains the sensitive data like password, user, host, etc. required for creating a db c