fix(nushell): source agenix secret env

2026-06-06 10:41:44 +02:00
parent b67922ca60
commit 5c92a9f1c6
1 changed files with 3 additions and 8 deletions
@@ -42,15 +42,10 @@ in {
              | load-env
          }

-          # Load m3tam3re secrets from agenix
+          # Load m3tam3re secrets from agenix. The secret file is Nushell code
+          # containing a `load-env { ... }` block, not KEY=VALUE lines.
          if ("/run/agenix/m3tam3re-secrets" | path exists) {
-            open /run/agenix/m3tam3re-secrets
-              | lines
-              | where {($in | str trim | str length) > 0}
-              | parse "{key}={value}"
-              | update value {str trim -c '"'}
-              | transpose -r -d
-              | load-env
+            source /run/agenix/m3tam3re-secrets
          }
      '';