I'm storing the password in a private git repo that contains the pillars for our app. This allows me to share the public state files (i.e. the hard work) without worrying about people haxxorzing my site. Hopefully.

Here's an example of the /srv/pillar directory.

`
# /srv/pillar/top.sls
base:
  'roles: discourseserver':
    - match: grain
    - discourse
`
`
# /srv/pillar/discourse.sls
discourse:
  - postgresql_password: "foo"
  - secret_token: "bar"
`