From 0618fc3962a535b91efec4707dcdcaea01b4617a Mon Sep 17 00:00:00 2001
From: Noah Masur <7386960+nmasur@users.noreply.github.com>
Date: Sat, 30 Mar 2024 13:01:34 -0400
Subject: [PATCH] try binding to wait for identity service to complete

and see if remainafterexit fixes one of the issues
---
 modules/nixos/services/identity.nix | 5 ++++-
 modules/nixos/services/secrets.nix  | 3 ++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/services/identity.nix b/modules/nixos/services/identity.nix
index 86b14cb..dadedd6 100644
--- a/modules/nixos/services/identity.nix
+++ b/modules/nixos/services/identity.nix
@@ -4,7 +4,10 @@
   systemd.services.wait-for-identity = {
     description = "Wait until identity file exists on the machine";
     wantedBy = [ "multi-user.target" ];
-    serviceConfig = { Type = "oneshot"; };
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
     script = ''
       for i in $(seq 1 10); do
           if [ -f ${config.identityFile} ]; then
diff --git a/modules/nixos/services/secrets.nix b/modules/nixos/services/secrets.nix
index 5b581b3..851a633 100644
--- a/modules/nixos/services/secrets.nix
+++ b/modules/nixos/services/secrets.nix
@@ -68,7 +68,8 @@
 
         description = "Decrypt secret for ${name}";
         wantedBy = [ "multi-user.target" ];
-        requires = [ "wait-for-identity.service" ];
+        bindsTo = [ "wait-for-identity.service" ];
+        after = [ "wait-for-identity.service" ];
         serviceConfig.Type = "oneshot";
         script = ''
           echo "${attrs.prefix}$(