From 5ec8223e637bf89fd6f8e122ce9f0ff7bde36204 Mon Sep 17 00:00:00 2001
From: Maximilian Bosch <maximilian@mbosch.me>
Date: Thu, 18 Aug 2022 11:38:49 +0200
Subject: [PATCH] nixos/sssd: explain why we use EnvironmentFile=

---
 nixos/modules/services/misc/sssd.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/misc/sssd.nix b/nixos/modules/services/misc/sssd.nix
index 299002d516da..60d4a799d5d2 100644
--- a/nixos/modules/services/misc/sssd.nix
+++ b/nixos/modules/services/misc/sssd.nix
@@ -99,6 +99,7 @@ in {
           Type = "forking";
           PIDFile = "/run/sssd.pid";
           StateDirectory = baseNameOf dataDir;
+          # We cannot use LoadCredential here because it's not available in ExecStartPre
           EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
         };
         preStart = ''