From 62676eaaa306e28a14b0468e9e62ec234cce9c02 Mon Sep 17 00:00:00 2001
From: Jonas Heinrich <onny@project-insanity.org>
Date: Mon, 18 Aug 2025 15:35:13 +0200
Subject: [PATCH] secret file optional

---
 module.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/module.nix b/module.nix
index 1ae4fb4..1e6efe1 100644
--- a/module.nix
+++ b/module.nix
@@ -84,7 +84,6 @@ in
         serviceConfig = {
 	  Type = "simple";
           ExecStart = lib.getExe pkgs.mail-quota-warning;
-	  EnvironmentFile = [ cfg.secrets ];
 
           # hardening
           AmbientCapabilities = "";
@@ -115,7 +114,9 @@ in
           SystemCallArchitectures = "native";
           SystemCallFilter = [ "@system-service" "~@privileged" ];
           UMask = "0077";
-        };
+        } // lib.optionalAttrs (cfg.secretFile != [ ]) {
+	  EnvironmentFile = cfg.secretFile;
+	};
       };
 
       systemd.timers.mail-quota-warning = {