started new ssh module with janus

2026-07-05 18:21:52 -05:00
parent fa29ce93f4
commit dc89592eb1
4 changed files with 281 additions and 16 deletions
@@ -128,6 +128,9 @@ in
        type = lib.types.nullOr lib.types.str;
        default = "admin";
      };
+      provisionerPasswordFile = lib.mkOption {
+        type = lib.types.nullOr lib.types.str;
+      };
      validUsers = lib.mkOption {
        description = "A list of the user names that this cert will be valid for";
        type = lib.types.listOf lib.types.str;
@@ -141,6 +144,9 @@ in
      package = config.pkgs.step-cli;
      args = [ "ssh" "certificate" "--sign" ]
        ++ lib.optionals (config.provisioner != null) [ "--provisioner" "${config.provisioner}" ]
+        ++ lib.optionals (config.provisionerPasswordFile != null) [
+          "--provisioner-password-file" "${config.provisionerPasswordFile}"
+        ]
        ++ lib.optionals config.overwrite [ "-f" ]
        ++ mkPrincipalArgs config.validUsers;
    };