Path to a file containing the RCON password. Loaded securely at service start via systemd’s LoadCredential and substituted into the generated pumpkin.toml in place of a placeholder string, using replace-secret; never placed in the Nix store. Compatible with sops-nix and agenix. Does not enable RCON on its own — set services.pumpkin.settings.networking.rcon.enabled as well.

null

"/run/secrets/pumpkin-rcon-password"