provisioner option

2026-03-15 21:05:38 -05:00
parent e38689fb82
commit 3e2ad120fe
1 changed files with 5 additions and 1 deletions
--- a/modules/services/step-ca/mtls.nix
+++ b/modules/services/step-ca/mtls.nix
@@ -46,6 +46,10 @@
        type = lib.types.listOf lib.types.str;
        default = [ ];
      };
+      provisioner = lib.mkOption {
+        type = lib.types.str;
+        default = "admin";
+      };
    };

    config = {
@@ -56,7 +60,7 @@
            ${cfg.subject} ${tlsCert} ${tlsKey} \
            --ca-url ${cfg.caURL} \
            --root ${rootCA} \
-            --provisioner admin \
+            --provisioner ${cfg.provisioner} \
            ${sanArgs}
          cat ${tlsCert} ${tlsKey} > ${mtlsBundle}
        '')