Credentials which are loaded from the contents of the specified file paths. This can be used to securely store tokens and secrets outside of the world-readable Nix store. See PocketID environment variables (all with the _FILE suffix). Accepts an attrset mapping from the variable name without its _FILE suffix to the path on disk. Alternatively you can use services.pocket-id.environmentFile to define all the variables in a single file.

{ }

{
  ENCRYPTION_KEY = "/run/secrets/pocket-id/encryption-key";
}