From acf2b17fd5bd7bf895f929f6042f95645f6a005d Mon Sep 17 00:00:00 2001
From: John Lancaster <32917998+jsl12@users.noreply.github.com>
Date: Wed, 25 Feb 2026 08:26:16 -0600
Subject: [PATCH] added appdaemon principal to ssh cert signing

---
 modules/home-manager/ssh.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/home-manager/ssh.nix b/modules/home-manager/ssh.nix
index f32bfa9..f47b345 100644
--- a/modules/home-manager/ssh.nix
+++ b/modules/home-manager/ssh.nix
@@ -32,7 +32,9 @@ in
           echo "Signing ${publicKeyFile}"
           echo "Copy the Step-CA JWK Provisioner password from 1password"
           step ssh certificate --sign \
-          --principal root --principal ${userName} \
+          --principal root \
+          --principal ${userName} \
+          --principal appdaemon \
           --provisioner admin \
           ${userName} ${publicKeyFile}
         '')