Where to store master.key for Rails 5.2+ app on Digital Ocean

Question

Is there a best practise regarding where to put master.key for a Rails 5.2 app on Digital Ocean?

Background:

• Rails 5.2 allows storing sensit