Check configuration with amtool check-config. The call to amtool is subject to sandboxing by Nix.
If you use credentials stored in external files (environmentFile, etc), they will not be visible to amtool and it will report errors, despite a correct configuration.