diff --git a/debian/main.tf b/debian/main.tf
index 590d048..f890b93 100644
--- a/debian/main.tf
+++ b/debian/main.tf
@@ -22,7 +22,8 @@ module "tf_debian_vm" {
   disk_base_pool        = coalesce(var.disk_base_pool, module.invariants.disk_base_pool)
   cloudinit_pool        = coalesce(var.cloudinit_pool, module.invariants.cloudinit_pool)
   bridge_name           = coalesce(var.bridge_name, module.invariants.bridge_name)
-  ca_host               = coalesce(var.ca_host, module.invariants.ca_host)
+  ca_host               = module.invariants.ca_host
+  ca_script             = module.invariants.ca_script
   memory                = var.memory
   data_disk             = var.data_disk
   fixed_address         = var.fixed_address
diff --git a/debian/variables.tf b/debian/variables.tf
index f08a79d..f8e6f1b 100644
--- a/debian/variables.tf
+++ b/debian/variables.tf
@@ -47,11 +47,6 @@ variable "bridge_name" {
   default = null
 }
 
-variable "ca_host" {
-  type    = string
-  default = null
-}
-
 variable "memory" {
   type    = number
   default = 1024
diff --git a/invariants/outputs.tf b/invariants/outputs.tf
index 8a1d536..6831ecf 100644
--- a/invariants/outputs.tf
+++ b/invariants/outputs.tf
@@ -28,3 +28,7 @@ output "bridge_name" {
 output "ca_host" {
   value = "hermes.dmz"
 }
+
+output "ca_script" {
+  value = "/root/ssh_ca/ssh_ca.sh"
+}