From ce28342ba33e8eecc92aed3d2a59bd3f67b8c547 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Wed, 17 Jan 2024 18:48:39 +0100
Subject: [PATCH] secret generators: run with set -efu -o pipefail

---
 nixosModules/clanCore/secrets/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixosModules/clanCore/secrets/default.nix b/nixosModules/clanCore/secrets/default.nix
index e0f814f08..5f6211b28 100644
--- a/nixosModules/clanCore/secrets/default.nix
+++ b/nixosModules/clanCore/secrets/default.nix
@@ -70,6 +70,7 @@
                   internal = true;
                   default = ''
                     export PATH="${lib.makeBinPath config.path}"
+                    set -efu -o pipefail
                     ${config.script}
                   '';
                 };