From df2d4bbbfc25329750496f57b55b50604ef37318 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Sat, 10 Jul 2021 16:11:31 +0200
Subject: [PATCH] modules/sops: fix manual

* Since 0d957142b6669dcd138fc3518f69d15432c6dcd5 the manual doesn't
  build since `<name>` is interpreted by docbook as (unmatched) XML-tag.
  I decided to use `<xref linkend` as this provides proper linking to
  the referenced option.

* Also, if the module is included on a machine where `sops` isn't used,
  but `documentation.nixos.includeAllModules = true;` is set, the module
  wouldn't evaluate because `config.sopsFile` is referenced in a
  `default`-tag. This is generally an issue since every change to this
  option would trigger a rebuild of the manual anyways.

  See also 94fd200305ceb031380381ae91a1ffabe9f06706 for that.
---
 modules/sops/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/sops/default.nix b/modules/sops/default.nix
index 8f9eae5..557f929 100644
--- a/modules/sops/default.nix
+++ b/modules/sops/default.nix
@@ -8,6 +8,7 @@ let
   secretType = types.submodule ({ config, ... }: {
     config = {
       sopsFile = lib.mkOptionDefault cfg.defaultSopsFile;
+      sopsFileHash = mkOptionDefault (optionalString cfg.validateSopsFiles "${builtins.hashFile "sha256" config.sopsFile}");
     };
     options = {
       name = mkOption {
@@ -73,9 +74,8 @@ let
       sopsFileHash = mkOption {
         type = types.str;
         readOnly = true;
-        default = if cfg.validateSopsFiles then "${builtins.hashFile "sha256" config.sopsFile}" else "";
         description = ''
-          Hash of the sops file, useful in systemd.services.<name>.restartTriggers.
+          Hash of the sops file, useful in <xref linkend="opt-systemd.services._name_.restartTriggers" />.
         '';
       };
     };