ibizaman / selfhostblocks

Modular server management based on NixOS modules and focused on best practices.
https://shb.skarabox.com
GNU Affero General Public License v3.0
207 stars 6 forks source link

Do not use activation script for script with dependencies #348

Closed ibizaman closed 1 day ago

ibizaman commented 1 day ago

The issue with activation script is the order is alphabetical, meaning the order the script is assembled is not really set in stone.

Here, because the script had a name starting with restic, it was ran before the sops secret generation script. And since the restic script was trying to use the secrets, it failed.

And if the activation script fails, you get a kernel panic.