title: How to avoid storing passwords or other sensitive data in appsettings.json
body: <p>I am working on a new ASP.NET Core web project based on Docker and micro services and I'm wondering if there is a way to avoid storing password or sensitive data in the <code>appsettings.json</code>.</p>
  
  <p>My question is how to specify secrets outside of the project so that they can't be accidentally committed to a source code repository (using Azure Key Vault or something else).</p>
  
  <p>My expectation is to combine between two configurations providers for eg some external key store (if there is no other solution or way of handling this kind of purposes) and application configuration.</p>