Made huge replacements more robust with envsubst instead of sed

templates/nix-config/misc/activation.nix

@@ -43,7 +43,7 @@
         exit 0
       fi
 
-PODMAN_NETWORKS
+$PODMAN_NETWORKS
 
       ${pkgs.coreutils}/bin/mkdir -p /home/numbus-admin/.numbus-server/
       ${pkgs.coreutils}/bin/touch /home/numbus-admin/.numbus-server/networked.true

templates/nix-config/misc/mail.nix

@@ -11,22 +11,22 @@ in
     fromAddress = lib.mkOption {
       description = "The 'from' address";
       type = lib.types.str;
-      default = "no-reply@DOMAIN_NAME";
+      default = "no-reply@$DOMAIN_NAME";
     };
     toAddress = lib.mkOption {
       description = "The 'to' address";
       type = lib.types.str;
-      default = "EMAIL_ADDRESS";
+      default = "$EMAIL_ADDRESS";
     };
     smtpServer = lib.mkOption {
       description = "The SMTP server address";
       type = lib.types.str;
-      default = "SENDER_MAIL_DOMAIN";
+      default = "$SENDER_MAIL_DOMAIN";
     };
     smtpUsername = lib.mkOption {
       description = "The SMTP username";
       type = lib.types.str;
-      default = "SENDER_MAIL_ADDRESS";
+      default = "$SENDER_MAIL_ADDRESS";
     };
     smtpPasswordPath = lib.mkOption {
       description = "Path to the secret containing SMTP password";

templates/nix-config/misc/networking.nix

@@ -11,15 +11,15 @@
   networking.firewall.enable = true;
 
   # Bridge configuration for VMs
-  networking.bridges.br0.interfaces = [ "TARGET_INTERFACE" ];
+  networking.bridges.br0.interfaces = [ "$TARGET_INTERFACE" ];
   networking.interfaces.br0.useDHCP = false;
-  networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
+  networking.nameservers = [ "$HOME_SERVER_IP" "9.9.9.9" ];
   networking.interfaces.br0.ipv4.addresses = [{
-    address = "HOME_SERVER_IP";
+    address = "$HOME_SERVER_IP";
     prefixLength = 24;
   }];
   networking.defaultGateway = {
-    address = "HOME_ROUTER_IP";
+    address = "$HOME_ROUTER_IP";
     interface = "br0";
   };
 

templates/nix-config/podman/traefik.nix

@@ -18,7 +18,7 @@ in
             image: docker.io/library/traefik:latest
             container_name: traefik
             networks:
-TRAEFIK_NETWORKS
+$TRAEFIK_NETWORKS
             ports:
               - 8080:80
               - 8443:443
@@ -39,7 +39,7 @@ TRAEFIK_NETWORKS
               - traefik.http.routers.traefik-https.tls.certresolver=cloudflare
             restart: always
         networks:
-TRAEFIK_REF_NETWORKS
+$TRAEFIK_REF_NETWORKS
       '';
 
     systemd.services.traefik = {