fix(nushell): source agenix secret env

2026-06-06 10:41:44 +02:00
parent b67922ca60
commit 5c92a9f1c6
1 changed files with 3 additions and 8 deletions
@@ -42,15 +42,10 @@ in {
              | load-env
          }
-          # Load m3tam3re secrets from agenix
+          # Load m3tam3re secrets from agenix. The secret file is Nushell code
          # containing a `load-env { ... }` block, not KEY=VALUE lines.
          if ("/run/agenix/m3tam3re-secrets" | path exists) {
-            open /run/agenix/m3tam3re-secrets
+            source /run/agenix/m3tam3re-secrets
              | lines
              | where {($in | str trim | str length) > 0}
              | parse "{key}={value}"
              | update value {str trim -c '"'}
              | transpose -r -d
              | load-env
          }
      '';