a

modules/wafrn.nix

@@ -507,8 +507,8 @@ in
                 ;;
             esac
 
-            key="${raw_line%%=*}"
-            value="${raw_line#*=}"
+            key="''${raw_line%%=*}"
+            value="''${raw_line#*=}"
 
             key="$(printf '%s' "$key" | tr -d '[:space:]')"
             if ! printf '%s' "$key" | grep -Eq '^[A-Za-z_][A-Za-z0-9_]*$'; then
@@ -516,16 +516,16 @@ in
               continue
             fi
 
-            first_char="${value:0:1}"
-            last_char="${value: -1}"
+            first_char="''${value:0:1}"
+            last_char="''${value: -1}"
             if [ "$first_char" = '"' ] && [ "$last_char" = '"' ]; then
-              value="${value:1:${#value}-2}"
+              value="''${value:1:''${#value}-2}"
             elif [ "$first_char" = "'" ] && [ "$last_char" = "'" ]; then
-              value="${value:1:${#value}-2}"
+              value="''${value:1:''${#value}-2}"
             fi
 
-            value="${value//\\/\\\\}"
-            value="${value//\"/\\\"}"
+            value="''${value//\\/\\\\}"
+            value="''${value//\"/\\\"}"
             printf '%s="%s"\n' "$key" "$value" >> ${serviceEnvFile}
           done < "${cfg.secretsFile}"
         ''}