From 5c92a9f1c6e6820e0d55ee6853fc46d637bd8a85 Mon Sep 17 00:00:00 2001
From: m3tam3re <p@m3ta.dev>
Date: Sat, 6 Jun 2026 10:41:44 +0200
Subject: [PATCH] fix(nushell): source agenix secret env

---
 profiles/base/shell/nushell.nix | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/profiles/base/shell/nushell.nix b/profiles/base/shell/nushell.nix
index 82e99fd..469fab1 100644
--- a/profiles/base/shell/nushell.nix
+++ b/profiles/base/shell/nushell.nix
@@ -42,15 +42,10 @@ in {
               | load-env
           }
 
-          # Load m3tam3re secrets from agenix
+          # Load m3tam3re secrets from agenix. The secret file is Nushell code
+          # containing a `load-env { ... }` block, not KEY=VALUE lines.
           if ("/run/agenix/m3tam3re-secrets" | path exists) {
-            open /run/agenix/m3tam3re-secrets
-              | lines
-              | where {($in | str trim | str length) > 0}
-              | parse "{key}={value}"
-              | update value {str trim -c '"'}
-              | transpose -r -d
-              | load-env
+            source /run/agenix/m3tam3re-secrets
           }
       '';