bruce (sqlwork.com)

see the docs:

  https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-3.1&tabs=windows

another approach is if the hosting provider supplies secure environment variables.

thanks for the link, but it did not mention how we can encrypt sections of the appsettings.json