services.teeworlds.environmentFile

Environment file as defined in systemd.exec(5).

Secrets may be passed to the service without adding them to the world-readable Nix store, by specifying placeholder variables as the option value in Nix and setting these variables accordingly in the environment file.

  # snippet of teeworlds-related config
  services.teeworlds.password = "$TEEWORLDS_PASSWORD";

  # content of the environment file
  TEEWORLDS_PASSWORD=verysecretpassword

Note that this file needs to be available on the host on which teeworlds is running.