secret generators: run with set -efu -o pipefail

2024-01-17 18:48:39 +01:00
parent aee0ee4d5e
commit ce5e6bfd10
1 changed files with 1 additions and 0 deletions
--- a/nixosModules/clanCore/secrets/default.nix
+++ b/nixosModules/clanCore/secrets/default.nix
@@ -70,6 +70,7 @@
                  internal = true;
                  default = ''
                    export PATH="${lib.makeBinPath config.path}"
+                    set -efu -o pipefail
                    ${config.script}
                  '';
                };