Merge #257: generate-secrets: always run with Bash, stop on errors

2a9b918f72 generate-secrets: always run with Bash, stop on errors (Erik Arvstedt)

Pull request description:

ACKs for top commit:
  jonasnick:
    ACK 2a9b918f72

Tree-SHA512: 9993f6b1880dabfed60f6ef9e4827c8d1a465572571e353bc81936ebd40f99c8e554a7c7f1b821d16f3dda31aa229d71e3307cad42b0a79d142ff6acc8d4959c

pkgs/generate-secrets/default.nix

@@ -9,7 +9,7 @@ let
     exec ${pkgs.python3}/bin/python ${rpcauthSrc} "$@"
   '';
 in
-writeScript "generate-secrets" ''
+writers.writeBash "generate-secrets" ''
   export PATH=${lib.makeBinPath [ coreutils apg openssl gnugrep rpcauth ]}
   . ${./generate-secrets.sh} ${./openssl.cnf}
 ''

pkgs/generate-secrets/generate-secrets.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
 
+set -euo pipefail
+
 opensslConf=${1:-openssl.cnf}
 
 makePasswordSecret() {