services.prometheus.exporters.snowflake.privateKeyFile

Path to the user's RSA private key for key-pair authentication. The file is passed to the service via systemd.exec(5) credentials, so it is read only by the exporter and never copied into the world-readable Nix store. If the key is encrypted, supply its password via environmentFile (SNOWFLAKE_EXPORTER_PRIVATE_KEY_PASSWORD).

Mutually exclusive with password authentication; when set, do not also provide SNOWFLAKE_EXPORTER_PASSWORD.