From c13f744cdf287c4c2d85422668be22d0e266436d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gutyina=20Gerg=C5=91?= <gutyina.gergo.2@gmail.com>
Date: Thu, 16 Oct 2025 12:26:02 +0200
Subject: [PATCH] nixos/actual: add environmentFile option

---
 nixos/modules/services/web-apps/actual.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/nixos/modules/services/web-apps/actual.nix b/nixos/modules/services/web-apps/actual.nix
index af15471521f1..1ece9f7f04f1 100644
--- a/nixos/modules/services/web-apps/actual.nix
+++ b/nixos/modules/services/web-apps/actual.nix
@@ -32,6 +32,16 @@ in
       description = "Whether to open the firewall for the specified port.";
     };
 
+    environmentFile = mkOption {
+      type = types.nullOr types.path;
+      default = null;
+      description = ''
+        Environment file for specifying additional settings such as secrets.
+
+        See <https://actualbudget.org/docs/config/oauth-auth#environment-variables>.
+      '';
+    };
+
     settings = mkOption {
       default = { };
       description = "Server settings, refer to [the documentation](https://actualbudget.org/docs/config/) for available options.";
@@ -76,6 +86,7 @@ in
         Group = "actual";
         StateDirectory = "actual";
         WorkingDirectory = dataDir;
+        EnvironmentFile = cfg.environmentFile;
         LimitNOFILE = "1048576";
         PrivateTmp = true;
         PrivateDevices = true;