From b912aa82fa180967a95bfd13034bd44d4aa5f6ab Mon Sep 17 00:00:00 2001
From: Danilo Reyes <danilo.reyes.251@proton.me>
Date: Wed, 10 Dec 2025 02:41:10 -0600
Subject: [PATCH] Update Keycloak configuration to ensure proper handling of
 SOPS secrets and maintain consistency in secret file references

---
 modules/servers/keycloak.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/servers/keycloak.nix b/modules/servers/keycloak.nix
index 735442e..b7ea960 100644
--- a/modules/servers/keycloak.nix
+++ b/modules/servers/keycloak.nix
@@ -11,11 +11,11 @@ in
 {
   options.my.servers.keycloak = setup.mkOptions "keycloak" "auth" 8090;
   config = lib.mkIf (cfg.enable && config.my.secureHost) {
+    sops.secrets.postgres-password.sopsFile = ../../secrets/secrets.yaml;
     sops.secrets.keycloak = {
       sopsFile = ../../secrets/env.yaml;
       restartUnits = [ "keycloak.service" ];
     };
-    sops.secrets.postgres-password.sopsFile = ../../secrets/secrets.yaml;
     services.keycloak = {
       inherit (cfg) enable;
       database = {