deployment keys: disable service if no key destinations are in /run/

NixOS · Nov 27, 2018 · a0b95d5 · a0b95d5
1 parent 204cafd
commit a0b95d5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/nix/keys.nix b/nix/keys.nix
@@ -227,7 +227,9 @@ in
 
     systemd.services = (
       { nixops-keys =
-        { enable = config.deployment.keys != {};
+        { enable = lib.any (key: lib.hasPrefix "/run/" key.destDir) (
+            lib.attrValues config.deployment.keys
+          );
           description = "Waiting for NixOps Keys";
           wantedBy = [ "keys.target" ];
           before = [ "keys.target" ];