nix-darwin: fix launchd decrypt scripts

Mic92 · Jan 2, 2025 · 24d8918 · 24d8918
1 parent bcb8b65
commit 24d8918
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/modules/nix-darwin/default.nix b/modules/nix-darwin/default.nix
@@ -384,7 +384,7 @@ in
       };
 
       launchd.daemons.sops-install-secrets = {
-        command = installScript;
+        command = "sh -c ${lib.escapeShellArg installScript}";
         serviceConfig = {
           RunAtLoad = true;
           KeepAlive = false;

diff --git a/modules/nix-darwin/secrets-for-users/default.nix b/modules/nix-darwin/secrets-for-users/default.nix
@@ -42,7 +42,7 @@ in
   };
 
   launchd.daemons.sops-install-secrets-for-users = lib.mkIf (secretsForUsers != [ ]) {
-    command = installScript;
+    command = "sh -c ${lib.escapeShellArg installScript}";
     serviceConfig = {
       RunAtLoad = true;
       KeepAlive = false;