diff --git a/nixos/modules/services/security/spire/agent.nix b/nixos/modules/services/security/spire/agent.nix
index 6d0b322334c3..2d81c932bd34 100644
--- a/nixos/modules/services/security/spire/agent.nix
+++ b/nixos/modules/services/security/spire/agent.nix
@@ -49,6 +49,16 @@ in
               default = "/run/spire/agent/public/api.sock";
               description = "The path to the SPIRE agent socket";
             };
+            join_token = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = "An optional token which has been generated by the SPIRE server";
+            };
+            join_token_file = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = "Path to a file containing an optional join token which has been generated by the SPIRE server";
+            };
           };
           plugins = lib.mkOption {
             description = ''