Must rest-server pasword be in the repository URL?

[grifferz]

I'm trying to use a rest-server for my repo. If I have config like this:

[repository]
repository = "rest:https://[email protected]:12345/"

then rustic gives a 401 Unauthorized error as I would expect since I did not specify a password.

With restic the rest-server password can be specified with an environment variable or password file. I can see no configuration for this in rustic, which leaves my only choice to put it in the actual URL in the main configuration. (i.e. "rest:https://user:[email protected]:12345/")

Doing that works but I'd really rather not put a password there. Is there a config option or environment variable that I have missed?