Environment file as defined in systemd.exec(5). Secrets may be passed to the service without adding them to the world-readable Nix store, by specifying placeholder variables as the option value in Nix and setting these variables accordingly in the environment file. # snippet of murmur-related config services.murmur.password = "$MURMURD_PASSWORD"; # content of the environment file MURMURD_PASSWORD=verysecretpassword Note that this file needs to be available on the host on which murmur is running.

null

"${config.services.murmur.stateDir}/murmurd.env"