{ ... }:

{
  resource.vault_mount.ssh-host = {
    type = "ssh";
    path = "ssh-host";
  };

  resource.vault_ssh_secret_backend_ca.ssh-host = {
    backend = "\${vault_mount.ssh-host.path}";
  };
}