From 8d1362635116b5ff2f364e18b1f67a32e3726c9a Mon Sep 17 00:00:00 2001
From: jobs62 <cd-microsoft@analphabet.me>
Date: Thu, 28 Nov 2024 16:38:51 +0100
Subject: [PATCH] try fixing templates on home-manager

Update pkgs/sops-install-secrets/main.go
---
 modules/home-manager/sops.nix      | 1 +
 modules/home-manager/templates.nix | 8 +++++---
 pkgs/sops-install-secrets/main.go  | 6 +++++-
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/modules/home-manager/sops.nix b/modules/home-manager/sops.nix
index 68ca842..575c5fc 100644
--- a/modules/home-manager/sops.nix
+++ b/modules/home-manager/sops.nix
@@ -99,6 +99,7 @@ let
         sshKeyPaths = cfg.gnupg.sshKeyPaths;
         ageKeyFile = cfg.age.keyFile;
         ageSshKeyPaths = cfg.age.sshKeyPaths;
+        placeholderBySecretName = cfg.placeholder;
         userMode = true;
         logging = {
           keyImport = builtins.elem "keyImport" cfg.log;
diff --git a/modules/home-manager/templates.nix b/modules/home-manager/templates.nix
index c64802a..460f274 100644
--- a/modules/home-manager/templates.nix
+++ b/modules/home-manager/templates.nix
@@ -12,6 +12,8 @@ let
     mapAttrs
     types
     ;
+
+  hmConfig = config;
 in
 {
   options.sops = {
@@ -33,7 +35,7 @@ in
                 description = "Path where the rendered file will be placed";
                 type = types.singleLineStr;
                 # Keep this in sync with `RenderedSubdir` in `pkgs/sops-install-secrets/main.go`
-                default = "${config.xdg.configHome}/sops-nix/secrets/rendered/${config.name}";
+                default = "${hmConfig.xdg.configHome}/sops-nix/secrets/rendered/${config.name}";
               };
               content = mkOption {
                 type = types.lines;
@@ -97,10 +99,10 @@ in
   };
 
   config = lib.optionalAttrs (options ? sops.secrets) (
-    lib.mkIf (config.sops.templates != { }) {
+    lib.mkIf (hmConfig.sops.templates != { }) {
       sops.placeholder = mapAttrs (
         name: _: mkDefault "<SOPS:${builtins.hashString "sha256" name}:PLACEHOLDER>"
-      ) config.sops.secrets;
+      ) hmConfig.sops.secrets;
     }
   );
 }
diff --git a/pkgs/sops-install-secrets/main.go b/pkgs/sops-install-secrets/main.go
index 280df4c..562dd24 100644
--- a/pkgs/sops-install-secrets/main.go
+++ b/pkgs/sops-install-secrets/main.go
@@ -698,7 +698,11 @@ func (app *appContext) validateManifest() error {
 		// The Nix module only defines placeholders for secrets if there are
 		// templates.
 		if len(m.Templates) > 0 {
-			placeholder := m.PlaceholderBySecretName[secret.Name]
+			placeholder, present := m.PlaceholderBySecretName[secret.Name]
+			if !present {
+				return fmt.Errorf("placeholder for %s not found in manifest", secret.Name)
+			}
+
 			app.secretByPlaceholder[placeholder] = secret
 		}
 	}