diff --git a/.drone.yml b/.drone.yml
index cf1ccb4..55c3c1b 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -8,7 +8,9 @@ steps:
   environment:
     NIX_REMOTE: daemon
     PATH: /nix/var/nix/profiles/system/sw/bin/
-    SSL_CERT_FILE: /nix/var/nix/profiles/system/etc/ssl/certs/ca-bundle.crt
+    SSL_CERT_FILE: /nix/var/nix/profiles/system/etc/ssl/certs/ca-certificates.crt
+    GIT_SSL_CAINFO: /nix/var/nix/profiles/system/etc/ssl/certs/ca-certificates.crt
+    CURL_CA_BUNDLE: /nix/var/nix/profiles/system/etc/ssl/certs/ca-certificates.crt
     PAGER: cat
     USER: root
   volumes:
@@ -26,6 +28,6 @@ volumes:
     path: /nix
 ---
 kind: signature
-hmac: 1d9dc0576a5f871c84ac9fd1919fcbd85a7e68fe927f8467d1bfc856fa0c5967
+hmac: d9b3b156902d9351d56c103b9c9f91588c9b3ed17a821dd14877bf8e567d939d
 
 ...
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..888ded0
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,25 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1596792298,
+        "narHash": "sha256-DM1fPvyRKneMihzALrguof78FxzBfRw243EFggkpog0=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "585aa266d36fc6cc5f300d6f0696f89168f38c3c",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "type": "indirect"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}