diff --git a/modules/secrets-envsubst.nix b/modules/secrets-envsubst.nix
index a890cf6..62c3f95 100644
--- a/modules/secrets-envsubst.nix
+++ b/modules/secrets-envsubst.nix
@@ -74,6 +74,7 @@ let
           else
             echo "Failed to run the substition"
             rm '${substituted}.tmp'
+            exit 1
           fi
         '';
 
diff --git a/modules/secrets.nix b/modules/secrets.nix
index 62a867c..cf46ad2 100755
--- a/modules/secrets.nix
+++ b/modules/secrets.nix
@@ -64,6 +64,7 @@ let
           else
             echo "Failed to decrypt the secret"
             rm '${decrypted}.tmp'
+            exit 1
           fi
         '';