File access on Ubuntu?

Question

Node.js

I am new to ubuntu and have a question.
1. I heard that there are vaults for passwords, apikeys, etc. But I have not seen a single example of the interaction of such a storage with nodejs. Let's say my server was hacked and an attacker can simply open a nodejs script, write console.log's and get all the information, so you also need to run nodejs with pm2 with the necessary access rights.
I would like to read about protection on ubuntu specifically with nodejs.
I thought about loading the pm2-config.json file, which I will run with all the necessary arguments and then delete it from the server (probably not working and inadequate approach).

Answer 1

If the server is hacked, the hacker will either get all your keys directly from the unencrypted storage, or intercept at the moment of transfer from the encrypted storage to the application (more difficult), or from the process memory (even more difficult, but quite feasible).
The method of protection in your case is to prevent hacking, and not to pile up unnecessary entities.