diff --git a/homelab-services/gitea/flake.nix b/homelab-services/gitea/flake.nix
index e1e81da..f0e6d0a 100644
--- a/homelab-services/gitea/flake.nix
+++ b/homelab-services/gitea/flake.nix
@@ -57,6 +57,8 @@
               serviceConfig = {
                 Type = "oneshot";
                 ExecStart = pkgs.writeShellScript "start-gitea" ''
+                  set -euo pipefail
+
                   echo "Creating temp dir"
                   kubernetes_config=$(mktemp -d)
 
@@ -65,7 +67,7 @@
                   echo "${opts.database-hostname}" | $gomplate \
                     --input-dir=${k3sDir} \
                     --output-dir=$kubernetes_config \
-                    --datasource credentials=file://${opts.credentialsFile}?type=application/x-env
+                    --datasource credentials=file://${opts.credentialsFile}?type=application/x-env \
                     --datasource dbhostname=stdin:
 
                   echo "Applying k3s config"