Environment variables which are loaded from the contents of the specified file paths. This can be used to securely store tokens and secrets outside of the world-readable Nix store. See PocketID environment variables. Alternatively you can use services.pocket-id.environmentFile to define all the variables in a single file.

{ }

{
  ENCRYPTION_KEY = "/run/secrets/pocket-id/encryption-key";
}