security.pki: add module to configure ca certificates

This makes NIX_SSL_CERT_FILE configurable and makes
/etc/ssl/certs/ca-certificates.crt available like nixos.
This commit is contained in:
Daiderd Jordan 2019-01-15 21:55:08 +01:00
parent 61e30229cc
commit 2e525a93da
No known key found for this signature in database
GPG key ID: D02435D05B810C96
3 changed files with 86 additions and 6 deletions

View file

@ -3,7 +3,6 @@
with lib;
let
cfg = config.environment;
exportVariables =
@ -13,10 +12,10 @@ let
mapAttrsFlatten (n: v: ''alias ${n}="${v}"'') cfg.shellAliases;
makeDrvBinPath = concatMapStringsSep ":" (p: if isDerivation p then "${p}/bin" else p);
in
in {
{
options = {
environment.systemPackages = mkOption {
type = types.listOf types.package;
default = [];
@ -147,7 +146,6 @@ in {
'';
type = types.lines;
};
};
config = {
@ -172,8 +170,7 @@ in {
'';
environment.variables =
{ NIX_SSL_CERT_FILE = mkDefault "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
EDITOR = mkDefault "nano";
{ EDITOR = mkDefault "nano";
PAGER = mkDefault "less -R";
};