fix(nushell): guard optional agenix secrets source

2026-06-10 08:18:01 +02:00
parent 4fe9f3e306
commit cd80ded6c0
1 changed files with 6 additions and 2 deletions
@@ -44,9 +44,13 @@ in {

          # Load m3tam3re secrets from agenix. The secret file is Nushell code
          # containing a `load-env { ... }` block, not KEY=VALUE lines.
-          if ("/run/agenix/m3tam3re-secrets" | path exists) {
-            source /run/agenix/m3tam3re-secrets
+          # `source` resolves literal paths at parse time, so use `null` when absent.
+          const m3tam3re_secrets_file = if ("/run/agenix/m3tam3re-secrets" | path exists) {
+            "/run/agenix/m3tam3re-secrets"
+          } else {
+            null
          }
+          source $m3tam3re_secrets_file
      '';

      configFile.text = ''