Remove and ignore config.js from repository, instead include a config template users can use to create their own config file. This way, no assume-unchanged inconvenience will be required.
delete accidentally added sensitive config file