CLI‑password file

--password-file

Read the iCloud password from a file on each auth attempt.

Usage

kei sync --password-file /run/secrets/icloud_password

Details

• Default: none
• Type: file path
• Env var: KEI_PASSWORD_FILE
• TOML key: [auth].password_file
• Conflicts with --password and --password-command

The file is read every time kei needs to authenticate, not just at startup. In watch mode, this lets you rotate the secret without restarting kei.

Trailing newlines are stripped. The file should contain only the password.

Docker secrets

services:
  kei:
    image: ghcr.io/rhoopr/kei:latest
    secrets:
      - icloud_password
    command:
      - service
      - run
      - --config
      - /config/config.toml
      - --password-file
      - /run/secrets/icloud_password

secrets:
  icloud_password:
    file: ./icloud_password.txt

Related

• --password
• --password-command
• --save-password
• Credentials