hi, thanks a lot for colmena. though I'm a long time NixOS user this is the first deployment tool I use. :)

we had the problem yesterday, that the separate repo containing secrets wasn't pulled before applying changes. thus old secrets were pushed.

how would you solve that? thinking about aliasing colmena to include some checks before actually running it but that seems hackish.

there are no pre-run hooks, right?

I'm getting the following error on a simple deployment at the moment:

-> % colmena apply
[INFO ] Enumerating nodes...
error: infinite recursion encountered

       at /nix/store/y41rr1klzvwrmjs6smyl8kd1ipa5m5kj-source/lib/modules.nix:305:28:

          304|         builtins.addErrorContext (context name)
          305|           (args.${name} or config._module.args.${name})
             |                            ^
          306|       ) (lib.functionArgs f);
(use '--show-trace' to show detailed location information)
[ERROR] -----
[ERROR] Operation failed with error: Nix exited with error code: 1

NixOS config is

{ config, lib, pkgs, modulesPath, home-manager, ... }:
{
  deployment = {
    targetHost = "192.168.x.y";
    targetUser = "nixos";
    tags = [ "rpi" "lab" ];
  };

  imports = [
    (home-manager + "/nixos")
  ];
}