adding config file in a separate folder

the config folder access should be restricted in the real world