Added extra config options to allow reading passwords from file rather than the world-readable nix store. The full config.json file is created at service startup. Relevant to #18881
These changes are backwards compatible.
Pump.io runs its web server as a standalone service listening on 443. It's also possible to put the service behind a HTTP reverse proxy.