created config options for step-ca

2026-07-03 23:06:06 -05:00
parent 6499ad7612
commit 35fec024e0
2 changed files with 166 additions and 116 deletions
@@ -26,6 +26,21 @@ in
            "fded:fb16:653e:25da:be24:11ff:fea0:753f"
          ];
        };
+        step-ca = {
+          rootCertPath = ./root_ca.crt;
+          dnsNames = [
+            "${hostname}.john-stream.com"
+            "192.168.1.244"
+          ];
+          secrets = {
+            sopsFile = ./secrets.yaml;
+            caPassword = "janus/ca_password";
+            intermediateCrt = "janus/intermediate_ca_crt";
+            intermediateKey = "janus/intermediate_ca_key";
+            sshHostCaKey = "janus/ssh_host_ca_key";
+            sshUserCaKey = "janus/ssh_user_ca_key";
+          };
+        };
        mtls = {
          enable = true;
          subject = hostname;