From 66aad88635c49aafe8f5c5ebbdf4fda82de1f335 Mon Sep 17 00:00:00 2001
From: Arian van Putten <arian@arianvp.me>
Date: Fri, 24 Apr 2026 11:14:17 +0200
Subject: [PATCH] nixos/spire: add join_token and join_token_file options

---
 nixos/modules/services/security/spire/agent.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/nixos/modules/services/security/spire/agent.nix b/nixos/modules/services/security/spire/agent.nix
index 6d0b322334c3..2d81c932bd34 100644
--- a/nixos/modules/services/security/spire/agent.nix
+++ b/nixos/modules/services/security/spire/agent.nix
@@ -49,6 +49,16 @@ in
               default = "/run/spire/agent/public/api.sock";
               description = "The path to the SPIRE agent socket";
             };
+            join_token = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = "An optional token which has been generated by the SPIRE server";
+            };
+            join_token_file = lib.mkOption {
+              type = lib.types.nullOr lib.types.str;
+              default = null;
+              description = "Path to a file containing an optional join token which has been generated by the SPIRE server";
+            };
           };
           plugins = lib.mkOption {
             description = ''