Environment file as defined in systemd.exec(5). Secrets may be passed to the service without adding them to the world-readable Nix store, by specifying placeholder variables as the option value in Nix and setting these variables accordingly in the environment file. Snippet of HedgeDoc config containing a secret: services.hedgedoc.settings.dbURL = "postgres://hedgedoc:\${DB_PASSWORD}@db-host:5432/hedgedocdb"; and the content of this environment file: DB_PASSWORD=verysecretdbpassword ```

null

"/var/lib/hedgedoc/hedgedoc.env"