From 8b449ec7211492ef8573d210ff5d63c098a0a22f Mon Sep 17 00:00:00 2001
From: NyxErinys <NyxErinys5@gmail.com>
Date: Sat, 13 Jun 2026 03:50:59 -0500
Subject: [PATCH] import secrets right

---
 modules/k3s/default.nix | 9 +++++----
 modules/k3s/secrets.nix | 8 ++++++--
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/modules/k3s/default.nix b/modules/k3s/default.nix
index fcae7e8..7c3dfdb 100644
--- a/modules/k3s/default.nix
+++ b/modules/k3s/default.nix
@@ -4,6 +4,10 @@ let
   cfg = config.nyxs-nix.services.k3s;
 in
 {
+  imports = [
+    ./secrets.nix
+  ];
+
   options.nyxs-nix.services.k3s = with types; {
     enable = mkEnableOption "Enable the vrrp quotes service";
 
@@ -15,10 +19,7 @@ in
   };
 
   config = mkIf cfg.enable {
-    imports = [
-      ./secrets.nix
-    ];
-    
+
     networking.firewall.allowedTCPPorts = [
       6443 # k3s, api server
       2379 # k3s, etcd clients
diff --git a/modules/k3s/secrets.nix b/modules/k3s/secrets.nix
index 5256c0c..fb0e033 100644
--- a/modules/k3s/secrets.nix
+++ b/modules/k3s/secrets.nix
@@ -1,6 +1,10 @@
-{ config, ... }:
+{ config, lib, ... }:
+with lib;
+let
+  cfg = config.nyxs-nix.services.k3s;
+in
 {
-  sops.templates = {
+  sops.templates = mkIf cfg.enable {
      "authentik-secrets.yaml" = {
       content = ''
         apiVersion: v1