Expose only the `PaymentServer` executable via ourpkgs.zkapissuer.

nixos/modules/issuer.nix

@@ -6,7 +6,7 @@ in {
   options = {
     services.private-storage-issuer.enable = lib.mkEnableOption "PrivateStorage ZKAP Issuer Service";
     services.private-storage-issuer.package = lib.mkOption {
-      default = ourpkgs.zkapissuer.components.exes."PaymentServer-exe";
+      default = ourpkgs.zkapissuer;
       type = lib.types.package;
       example = lib.literalExample "pkgs.zkapissuer.components.exes.\"PaymentServer-exe\"";
       description = ''
@@ -172,7 +172,7 @@ in {
             "--stripe-endpoint-scheme ${cfg.stripeEndpointScheme} " +
             "--stripe-endpoint-port ${toString cfg.stripeEndpointPort}";
         in
-          "${cfg.package}/bin/PaymentServer-exe ${originArgs} ${issuerArgs} ${databaseArgs} ${httpsArgs} ${stripeArgs}";
+          "${cfg.package.exePath} ${originArgs} ${issuerArgs} ${databaseArgs} ${httpsArgs} ${stripeArgs}";
     };
 
     # Certificate renewal.  A short-lived service meant to be repeatedly

nixos/pkgs/zkapissuer/default.nix

 { callPackage }:
 let
   repo = callPackage ./repo.nix { };
+  PaymentServer = (import "${repo}/nix").PaymentServer;
 in
-  (import "${repo}/nix").PaymentServer
+  PaymentServer.components.exes."PaymentServer-exe"