You're still keeping sensitive information in your code base, so that's not a configuration file.

In the real world they are typically managed separately from the code base and often by people who may not be programmers (I realise your use case is simpler than the typical one).

See Config::Tiny for an example.