diff --git a/entrypoint.nu b/entrypoint.nu
index 3526c59..956f91d 100644
--- a/entrypoint.nu
+++ b/entrypoint.nu
@@ -98,9 +98,9 @@ def main [
 
     print $"HOSTNAME: ($env.HOSTNAME)"
 
-    if ($env | get -i RESTIC_PASSWORD_FILE | is-empty) {
-        print "RESTIC_PASSWORD_FILE not set."
-        healthcheck_fail $healthcheck_url "RESTIC_PASSWORD_FILE not set."
+    if ($env | get -i RESTIC_PASSWORD_FILE | is-empty) and ($env | get -i RESTIC_PASSWORD_COMMAND | is-empty) {
+        print "Must set either RESTIC_PASSWORD_FILE or RESTIC_PASSWORD_COMMAND."
+        healthcheck_fail $healthcheck_url "Must set either RESTIC_PASSWORD_FILE or RESTIC_PASSWORD_COMMAND."
         exit 1
     }
 
diff --git a/flake.nix b/flake.nix
index 3908d4c..14de8df 100644
--- a/flake.nix
+++ b/flake.nix
@@ -22,9 +22,9 @@
             restic =
               let
                 pname = "restic";
-                version = "0.15.1";
-                hash = "sha256-KdPslVJHH+xdUuFfmLZumP2lHzkDrrAvpDaj38SuP8o=";
-                vendorHash = "sha256-oetaCiXWEBUEf382l4sjO0SCPxkoh+bMTgIf/qJTQms=";
+                version = "0.15.2";
+                hash = "sha256-YJBHk/B8+q5f0k5i5hpucsJK4T/cRu9Jv7+O6vlT64Q=";
+                vendorHash = "sha256-GWFaCfiE8Ph2uBTBI0E47pH+EJsMsMr1NDuaIGvyXRM=";
               in
               pkgs.buildGoModule {
                 inherit pname version vendorHash;