From f940a179053e54de0d46aada5b42502f7563f45f Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 20 Apr 2019 18:54:58 +0200
Subject: tv pki: immigrate certificate environment

---
 tv/2configs/pki/default.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 tv/2configs/pki/default.nix

(limited to 'tv/2configs/pki/default.nix')

diff --git a/tv/2configs/pki/default.nix b/tv/2configs/pki/default.nix
new file mode 100644
index 00000000..f22b9a6d
--- /dev/null
+++ b/tv/2configs/pki/default.nix
@@ -0,0 +1,14 @@
+with import <stockholm/lib>;
+{ config, ... }: let
+
+  certFile = config.environment.etc."ssl/certs/ca-certificates.crt".source;
+
+in {
+
+  environment.variables = flip genAttrs (_: toString certFile) [
+    "CURL_CA_BUNDLE"
+    "GIT_SSL_CAINFO"
+    "SSL_CERT_FILE"
+  ];
+
+}
-- 
cgit v1.2.3