fix: fix _agenix_generation being empty if readlink fails

ryantm · Sep 10, 2024 · 4c3e972 · 4c3e972
1 parent f6291c5
commit 4c3e972
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/age.nix b/modules/age.nix
@@ -29,7 +29,7 @@ with lib; let
         mount -t ramfs none "${cfg.secretsMountPoint}" -o nodev,nosuid,mode=0751
     '';
   newGeneration = ''
-    _agenix_generation="$(basename "$(readlink ${cfg.secretsDir})" || echo 0)"
+    _agenix_generation="$(basename "$(readlink "${cfg.secretsDir}" || echo 0)")"
     (( ++_agenix_generation ))
     echo "[agenix] creating new generation in ${cfg.secretsMountPoint}/$_agenix_generation"
     mkdir -p "${cfg.secretsMountPoint}"