From 3c694b6fb3b64652ffb56108d28524ff6861337e Mon Sep 17 00:00:00 2001
From: Joshua Bell <abc@joshuabell.xyz>
Date: Thu, 5 Feb 2026 01:00:07 -0600
Subject: [PATCH] Use PathModified in systemd path unit for Zitadel JWT

---
 flakes/secrets-bao/nixos-module.nix | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/flakes/secrets-bao/nixos-module.nix b/flakes/secrets-bao/nixos-module.nix
index 3931f585..5d337257 100644
--- a/flakes/secrets-bao/nixos-module.nix
+++ b/flakes/secrets-bao/nixos-module.nix
@@ -541,17 +541,17 @@ in
              }
            ) cfg.secrets)
            // {
-             openbao-zitadel-jwt = {
-               description = "React to Zitadel JWT changes (restart vault-agent)";
-               wantedBy = [ "multi-user.target" ];
+              openbao-zitadel-jwt = {
+                description = "React to Zitadel JWT changes (restart vault-agent)";
+                wantedBy = [ "multi-user.target" ];
 
-               pathConfig = {
-                 PathChanged = cfg.zitadelJwtPath;
-                 Unit = "openbao-jwt-changed.service";
-                 TriggerLimitIntervalSec = 30;
-                 TriggerLimitBurst = 3;
-               };
-             };
+                pathConfig = {
+                  PathModified = cfg.zitadelJwtPath;
+                  Unit = "openbao-jwt-changed.service";
+                  TriggerLimitIntervalSec = 30;
+                  TriggerLimitBurst = 3;
+                };
+              };
 
               openbao-secrets-ready = {
                 description = "Re-check OpenBao secrets readiness";