Setting Up a Secure API Key on Hestia CP

I’m trying to set up a way to hide my API Key on the Hestia CP
My goal is to create a secure way to use my API key without exposing it to the browser.

What I’ve tried:

  1. Created /home/username/web/my_domain.com/public_html/ds-test/index.php
  2. Used PHP cURL to call DeepSeek API
  3. Added my API key in the PHP code

Current Status:

  • Page loads but API calls fail
  • Getting HTTP errors or no response
  • Not sure if it’s a PHP, cURL, or firewall issue

Any tips, or available step-by-step tutorial on how to achieve this goal?