MyNixOS website logo
option

services.pocket-id.credentials

Credentials which are loaded from the contents of the specified file paths.

This can be used to securely store tokens and secrets outside of the world-readable Nix store.

See PocketID environment variables (all with the _FILE suffix).

Accepts an attrset mapping from the variable name without its _FILE suffix to the path on disk.

Alternatively you can use services.pocket-id.environmentFile to define all the variables in a single file.

Declarations
Type
attribute set of absolute path
Default
{ }
Example
{
  ENCRYPTION_KEY = "/run/secrets/pocket-id/encryption-key";
}