From f56a32e494d0a5de4aa7136d6e5ab2aafaa0b877 Mon Sep 17 00:00:00 2001
From: John Lancaster <32917998+jsl12@users.noreply.github.com>
Date: Fri, 27 Mar 2026 21:20:27 -0500
Subject: [PATCH] fix

---
 modules/features/mtls.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/modules/features/mtls.nix b/modules/features/mtls.nix
index e4e6478..29023f5 100644
--- a/modules/features/mtls.nix
+++ b/modules/features/mtls.nix
@@ -103,12 +103,12 @@ let
       cat ${tlsCert} ${tlsKey} > ${mtlsBundle}
     '';
   
-  mkMtlsCheckScript = mtlsBundle: pkgs.writeShellScriptBin "mtls-check" ''
+  mkMtlsCheckScript = { pkgs, mtlsBundle }: pkgs.writeShellScriptBin "mtls-check" ''
     ${lib.getExe pkgs.openssl} x509 \
     -noout -subject -issuer \
     -ext subjectAltName,extendedKeyUsage \
     -enddate -in ${mtlsBundle}
-  ''
+  '';
 
   mkMtlsRenewScript = {
     pkgs,
@@ -270,7 +270,7 @@ in
             inherit (cfg) subject provisioner san lifetime;
             inherit pkgs tlsCert tlsKey mtlsBundle;
           })
-          (mkMtlsCheckScript { inherit (cfg) mtlsBundle; })
+          (mkMtlsCheckScript { inherit pkgs; inherit (cfg) mtlsBundle; })
           (mkMtlsRenewScript { inherit pkgs tlsCert tlsKey mtlsBundle; })
         ];
 
@@ -309,7 +309,7 @@ in
             inherit (cfg) subject provisioner san lifetime;
             inherit pkgs tlsCert tlsKey mtlsBundle;
           })
-          (mkMtlsCheckScript { inherit (cfg) mtlsBundle; })
+          (mkMtlsCheckScript { inherit pkgs; inherit (cfg) mtlsBundle; })
           (mkMtlsRenewScript { inherit pkgs tlsCert tlsKey mtlsBundle; })
         ];