With a mix of sensitive information like API keys, Vault might be a good solution...there's nothing preventing storing non-sensitive information like configuration in it. On the other hand, the business logic of API keys is different from config.

https://www.vaultproject.io/