config

const (
	DefaultNICoClientCAPath   = "/etc/nico/ca.crt"
	DefaultNICoClientCertPath = "/etc/nico/tls.crt"
	DefaultNICoClientKeyPath  = "/etc/nico/tls.key"

	// Flow uses the same SPIFFE trust domain (nico.local) and vault-nico-issuer as NICo,
	// so we can reuse the NICo certificates for mTLS with Flow.
	DefaultFlowClientCAPath   = "/etc/nico/ca.crt"
	DefaultFlowClientCertPath = "/etc/nico/tls.crt"
	DefaultFlowClientKeyPath  = "/etc/nico/tls.key"
)