...

1 files changed, 5 insertions, 1 deletions

diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index 53fe1e5e..17de1319 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -60,6 +60,10 @@ let
         type = types.nullOr types.str;
         default = null;
       };
+      certCfg = mkOption {
+        type = types.attrs;
+        default = {};
+      };
     };
   };
 in {
@@ -93,7 +97,7 @@ in {
             credentialsFile = knotDNSCredentials domain;
             dnsResolver = "1.1.1.1:53";
             keyType = "rsa4096"; # we don't like NIST curves
-          };
+          } // cfg.domains.${domain}.certCfg;
         in genAttrs (attrNames cfg.domains) domainAttrset;
     };