Janne Heß

It would have been great if you had provided [a link to z](https://github.com/rupa/z). As autoenv, z uses `builtin` which prevents alias usage: [code](https://github.com/rupa/z/blob/master/z.sh#L206) You can try to replace `builtin cd`...

@ShadowNinja's approach seems better for Debian as it dosn't use legacy systemd interfaces

Installing Markdown Extended fixed this issue for me.

That's not how crypto works. nginx would need yet another key to decrypt the binddn_password which would have to be readable by nginx. Just another level of indirection

Two ideas pop into my head, one in yaml, one in nix: ```yaml slapd: __dirMode: 0755 __dirOwner: slapd password: abc ``` ```nix { sops.secrets."slapd/password" = {}; sops.dirPermissions.slapd = { mode...

@jlesquembre Try setting `sops.age.sshKeyPaths = []`. Does that fix that?

@mtoohey31 could you help with the launchd logic? I don't really have the infrastructure to test anything in that regard

I think I have pretty much all review comments fixed now. Still missing is launchd support

Added an untested launchd module, please test

Feel free to open a PR against this branch if you need this feature.