···

       
369
       
369
       
 
       
          RuntimeDirectoryMode = "0400";

     

       
370
       
370
       
 
       
          LoadCredential = [

     

       
371
       
371
       
 
       
            "credentials.json:${tunnel.credentialsFile}"

     

       
372
       
372
       
-
       
          ] ++ (lib.optional (certFile != null) "cert.pem:certFile");

     

       
372
       
372
       
+
       
          ] ++ (lib.optional (certFile != null) "cert.pem:${certFile}");

     

       
373
       
373
       
 
       


     

       
374
       
374
       
 
       
          ExecStart = "${cfg.package}/bin/cloudflared tunnel --config=${mkConfigFile} --no-autoupdate run";

     

       
375
       
375
       
 
       
          Restart = "on-failure";