danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Remove escapeShellArg in reading secret source

Browse source 
Sometimes secret source contains env vars, which are incorrectly escaped.
This commit is contained in:
Dmitry 2026-06-04 14:53:27 +01:00
parent 96f574bbff
commit b452edc74c
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/default.nix
View file

@ -60,7 +60,7 @@ let
if isNull transform then x: x else transform; if isNull transform then x: x else transform;
in in
lib.attrsets.nameValuePair (secretName secret.name) ( lib.attrsets.nameValuePair (secretName secret.name) (
(t secret) "$(cat ${escapeShellArg (toString secret.source)})" (t secret) "$(cat ${toString secret.source})"
); );
replaceSecretsScript = replaceSecretsScript =