From f870ef0bf330abfc08325cee5e2f4933f5832901 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christopher=20M=C3=BChl?= <toki@toph.so>
Date: Wed, 18 Feb 2026 13:54:05 +0100
Subject: [PATCH] fix: pass S3 creds via env vars for nix copy, not URL params

---
 push-nix-cache/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/push-nix-cache/action.yaml b/push-nix-cache/action.yaml
index 62601e3..bd9edac 100644
--- a/push-nix-cache/action.yaml
+++ b/push-nix-cache/action.yaml
@@ -27,6 +27,6 @@ runs:
         echo "${NIX_SIGNING_KEY}" > /tmp/nix-key
         nix store sign -k /tmp/nix-key --recursive "${{ inputs.store-path }}"
         nix copy \
-          --to "s3://${{ inputs.s3-bucket }}?endpoint=${{ inputs.s3-endpoint }}&access-key-id=${AWS_ACCESS_KEY_ID}&secret-access-key=${AWS_SECRET_ACCESS_KEY}" \
+          --to "s3://${{ inputs.s3-bucket }}?endpoint=${{ inputs.s3-endpoint }}" \
           "${{ inputs.store-path }}"
         rm /tmp/nix-key