diff --git a/modules/hosts/janus/default.nix b/modules/hosts/janus/default.nix
index f0d6d0a..39bd3f4 100644
--- a/modules/hosts/janus/default.nix
+++ b/modules/hosts/janus/default.nix
@@ -8,8 +8,9 @@ in
     home.file.".step/config/defaults.json".text = builtins.toJSON {
       "ca-url" = "https://janus.john-stream.com/";
       fingerprint = "2036c44f7b5901566ff7611ea6c927291ecc6d2dd00779c0eead70ec77fa10d6";
-      root = (builtins.readFile ./root_ca.crt);
+      root = "${config.home.homeDirectory}/.step/certs/root_ca.crt";
     };
+    home.file.".step/certs/root_ca.crt".source = ./root_ca.crt;
   };
 
   flake.nixosConfigurations."${hostname}" = inputs.nixpkgs.lib.nixosSystem {