services.zerobyte.appSecretFile

Path to a file containing the application secret (32–256 characters), used to encrypt sensitive data in the database. Generate one with openssl rand -hex 32.

This should not be a path in the Nix store. The file is passed to the service via systemd credentials.