From a8b85bb8878b18f718b90787409d9c15fda61c10 Mon Sep 17 00:00:00 2001
From: Devorun <130918800+devorun@users.noreply.github.com>
Date: Thu, 9 Apr 2026 19:39:20 +0300
Subject: [PATCH] fix(nix): make setupSecrets activation script optional
 (#6227) (#6261)

---
 nix/nixosModules.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/nixosModules.nix b/nix/nixosModules.nix
index c961aa61..948f7df8 100644
--- a/nix/nixosModules.nix
+++ b/nix/nixosModules.nix
@@ -569,7 +569,7 @@
 
       # ── Activation: link config + auth + documents ────────────────────
       {
-        system.activationScripts."hermes-agent-setup" = lib.stringAfter [ "users" "setupSecrets" ] ''
+        system.activationScripts."hermes-agent-setup" = lib.stringAfter ([ "users" ] ++ lib.optional (config.system.activationScripts ? setupSecrets) "setupSecrets") ''
           # Ensure directories exist (activation runs before tmpfiles)
           mkdir -p ${cfg.stateDir}/.hermes
           mkdir -p ${cfg.stateDir}/home