From 5067cc312e32b47862a8c02455bb2cd8f89a48a0 Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Sat, 9 Sep 2017 16:20:47 +0200
Subject: [PATCH] set certificates
---
krebs/2configs/default.nix | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix
index c3400e171..90aaa254a 100644
--- a/krebs/2configs/default.nix
+++ b/krebs/2configs/default.nix
@@ -4,6 +4,13 @@ with import <stockholm/lib>;
{
imports = [
./backup.nix
+ (let ca-bundle = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"; in {
+ environment.variables = {
+ CURL_CA_BUNDLE = ca-bundle;
+ GIT_SSL_CAINFO = ca-bundle;
+ SSL_CERT_FILE = ca-bundle;
+ };
+ })
];
krebs.announce-activation.enable = true;
krebs.enable = true;