services.yggdrasil.settings.PrivateKeyPath

Path to the private key file on the host system. When specified, the key will be loaded via systemd credentials for secure access by the yggdrasil service.

Warning: Do not put private keys directly in the Nix store as they would be world-readable!