summaryrefslogtreecommitdiffstats
path: root/tv/2configs/pki/default.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2019-04-20 18:54:58 +0200
committertv <tv@krebsco.de>2019-04-20 18:54:58 +0200
commitf940a179053e54de0d46aada5b42502f7563f45f (patch)
tree3f595f6522f81f2589b9c7d0dbfca8106e24e80f /tv/2configs/pki/default.nix
parentd825d2db8796a0d19f22eba240a2e49213cf01e2 (diff)
tv pki: immigrate certificate environment
Diffstat (limited to 'tv/2configs/pki/default.nix')
-rw-r--r--tv/2configs/pki/default.nix14
1 files changed, 14 insertions, 0 deletions
diff --git a/tv/2configs/pki/default.nix b/tv/2configs/pki/default.nix
new file mode 100644
index 000000000..f22b9a6da
--- /dev/null
+++ b/tv/2configs/pki/default.nix
@@ -0,0 +1,14 @@
+with import <stockholm/lib>;
+{ config, ... }: let
+
+ certFile = config.environment.etc."ssl/certs/ca-certificates.crt".source;
+
+in {
+
+ environment.variables = flip genAttrs (_: toString certFile) [
+ "CURL_CA_BUNDLE"
+ "GIT_SSL_CAINFO"
+ "SSL_CERT_FILE"
+ ];
+
+}