title: How do I securely store a .pem file when working with git-tracked heroku project?
body: <p>I've got a git-tracked repo and am setting it up to work with APN for IOS push notifications. I'm looking at implementing the npm module <a href="https://github.com/argon/node-apn" rel="nofollow noreferrer">node-apn</a> in a similar way as <a href="https://github.com/hollyschinsky/PushNotificationSample" rel="nofollow noreferrer">PushNotificationSample</a></p>
  
  <p>In this code, there is </p>
  
  <pre><code>var options = {
      gateway: 'gateway.sandbox.push.apple.com', // this URL is different for Apple's Production Servers and changes when you go to production
      errorCallback: callback,
      cert: 'your-cert.pem', // ** NEED TO SET TO YOURS - see this tutorial - http://www.raywenderlich.com/32960/apple-push-notification-services-in-ios-6-tutorial-part-1
      key:  'your-key.pem',  // ** NEED TO SET TO YOURS
      passphrase: 'your-pw', // ** NEED TO SET TO YOURS
      port: 2195,                       
      enhanced: true,                   
      cacheLength: 100                  
  }
  </code></pre>
  
  <p>However, how am I meant to reference my .pem files without committing them to Github?</p>
  
  <p>At the moment, I'm deploying to Heroku. </p>