From d99c82c74ce8f3c8c9f5b6a8e90e80d0b6f65dd9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Sun, 8 Feb 2026 00:21:11 +0100
Subject: [PATCH] kanidm: fix service ordering for vault secret

Ensure vault-secret-kanidm-idm-admin runs before kanidm.service
by adding services dependency.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 services/kanidm/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/kanidm/default.nix b/services/kanidm/default.nix
index e5cb514..8d15bd5 100644
--- a/services/kanidm/default.nix
+++ b/services/kanidm/default.nix
@@ -48,6 +48,7 @@
   vault.secrets.kanidm-idm-admin = {
     secretPath = "kanidm/idm-admin-password";
     extractKey = "password";
+    services = [ "kanidm" ];
   };
 
   # Monitoring scrape target