I have this MySQL backup script that I use to back up MySQL databases. Very useful, and it runs on fixed intervals using a cron. However, I need somehow provide this script with the MySQL password. This password is not the same on every server, but as I manage several servers, this particular script is part of a git-controlled repository that is synced together with some other scripts occasionally. Now, my question is: how can I use this same script as part of a git repo, if the password is different? The solution I can come up with is defining the password as an external/global variable in shell, rather than in the script itself, and that way my script can remain the same on every server. However, I am not sure what the proper way is to do so, nor am I sure if this is a good idea (security/best practices-wise).