From afc46af79a4963ee2838f54a329e7ce8fd79b699 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Wed, 11 Mar 2026 07:59:49 -0700
Subject: [PATCH] fix: gate ZNC secret on service being enabled to fix zeta
 activation

The agenix secret for ZNC was unconditionally setting owner/group to
znc:znc, but with services.znc.enable = false the znc user doesn't
exist, causing activation to fail with "chown: invalid user: 'znc:znc'".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 hosts/zeta/services/znc.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/zeta/services/znc.nix b/hosts/zeta/services/znc.nix
index 078612e6..2ef826d8 100644
--- a/hosts/zeta/services/znc.nix
+++ b/hosts/zeta/services/znc.nix
@@ -1,9 +1,10 @@
 {
   config,
+  lib,
   pkgs,
   ...
 }: {
-  age.secrets.znc-conf = {
+  age.secrets.znc-conf = lib.mkIf config.services.znc.enable {
     file = ./../secrets/znc-conf.age;
     owner = config.services.znc.user;
     inherit (config.services.znc) group;