From d77d956380dd3910027d527de6b7a0ad5ad6f5fc Mon Sep 17 00:00:00 2001
From: Rod Boev <rod.boev@gmail.com>
Date: Thu, 2 Jul 2026 14:12:49 -0400
Subject: [PATCH] fix(#2422): validate env files before user drop

---
 nix/nixosModules.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/nixosModules.nix b/nix/nixosModules.nix
index 71adbb9c..7ff50204 100644
--- a/nix/nixosModules.nix
+++ b/nix/nixosModules.nix
@@ -175,7 +175,7 @@ in
           Type = "simple";
           User = cfg.user;
           Group = cfg.group;
-          ExecStartPre = lib.optional (cfg.environmentFiles != [ ]) "${protectedEnvironmentFileCheck} ${lib.escapeShellArgs (map builtins.toString cfg.environmentFiles)}";
+          ExecStartPre = lib.optional (cfg.environmentFiles != [ ]) "+${protectedEnvironmentFileCheck} ${lib.escapeShellArgs (map builtins.toString cfg.environmentFiles)}";
           ExecStart = "${cfg.package}/bin/hermes-webui";
           Restart = "on-failure";
           Environment = mappedEnvironment;