--- a/modules/nixos/secrets.nix
+++ b/modules/nixos/secrets.nix
@@ -139,7 +139,7 @@
       };
       config.parts = mkMerge [
         (mkIf (config.generator != null && config.generator ? parts) config.generator.parts)
-        (mapAttrs (_: _: {}) (removeAttrs sysConfig.data.secrets.${secretName} ["shared" "managed"]))
+        (mapAttrs (_: _: {}) (removeAttrs (sysConfig.data.secrets.${secretName} or {}) ["shared" "managed"]))
       ];
     }
   );