Just put your passwords in a separate `.environment` file and source it in your main file. Make sure the `.environment` file is in `.gitignore` (although there should be no reason to put it in your repo to begin with).

source $HOME/.environment

Done.