services.umami.settings.APP_SECRET_FILE

A file containing a secure random string. This is used for signing user sessions. The contents of the file are read through systemd credentials, therefore the user running umami does not need permissions to read the file. If you wish to set this to a string instead (not recommended since it will be placed world-readable in the Nix store), you can use the APP_SECRET option.