diff --git a/flake.nix b/flake.nix
index d8c2b5e..be2f012 100644
--- a/flake.nix
+++ b/flake.nix
@@ -87,6 +87,7 @@
               DynamicUser = true;
               RuntimeDirectory = name;
               ExecStartPre = "!${pkgs.writeShellScript "get-authkey" ''
+                set -e
                 TS_API_CLIENT_ID=${cfg.clientId} TS_API_CLIENT_SECRET=$(cat ${cfg.clientSecretFile}) ${get-authkey}/bin/get-authkey -ephemeral -tags ${lib.concatStringsSep "," cfg.tags} > $RUNTIME_DIRECTORY/authkey
                 chown ${name}:${name} $RUNTIME_DIRECTORY/authkey
               ''}";