From 411c6be1080373879905975984f4b597624d5269 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Wed, 27 May 2026 07:52:49 +0100
Subject: [PATCH] feat(nix): validate config at build time

---
 module.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/module.nix b/module.nix
index 22707b8..6e17a6c 100644
--- a/module.nix
+++ b/module.nix
@@ -189,7 +189,14 @@ in
             });
 
         environment.etc = {
-          "tranquil-pds/config.toml".source = settingsFormat.generate "tranquil-pds.toml" cfg.settings;
+          "tranquil-pds/config.toml".source =
+            let
+              conf = settingsFormat.generate "tranquil-pds.toml" cfg.settings;
+            in
+            pkgs.runCommandLocal "validated-tranquil-config" { nativeBuildInputs = [ cfg.package ]; } ''
+              tranquil-server --config ${conf} validate --ignore-secrets
+              ln -s ${conf} $out
+            '';
         };
 
         systemd.services.tranquil-pds = {