core password-store: define fileModule only if file is secret

2024-11-25 12:39:19 +01:00
parent 89228e9e48
commit 70a5910946
1 changed files with 5 additions and 3 deletions
--- a/nixosModules/clanCore/vars/secret/password-store.nix
+++ b/nixosModules/clanCore/vars/secret/password-store.nix
@@ -43,7 +43,9 @@ in
    clan.core.vars.settings =
      lib.mkIf (config.clan.core.vars.settings.secretStore == "password-store")
        {
-          fileModule = file: {
+          fileModule =
+            file:
+            lib.mkIf file.config.secret {
              path = "/run/secrets/${file.config.generatorName}/${file.config.name}";
            };
          secretUploadDirectory = lib.mkDefault "/etc/secret-vars";