treewide: use NIX_SSL_CERT_FILE instead of pkgs.cacert

LnL7 · Nov 16, 2024 · 5909f59 · 5909f59
1 parent f86f158
commit 5909f59
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/modules/examples/hydra.nix b/modules/examples/hydra.nix
@@ -3,7 +3,7 @@
 let
   environment = lib.concatStringsSep " "
     [ "NIX_REMOTE=daemon"
-      "NIX_SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+      "NIX_SSL_CERT_FILE=${config.environment.variables.NIX_SSL_CERT_FILE}"
     ];
 in
 

diff --git a/modules/examples/lnl.nix b/modules/examples/lnl.nix
@@ -63,7 +63,7 @@
   # launchd.user.agents.fetch-nixpkgs-updates = {
   #   command = "/usr/bin/sandbox-exec -f ${config.security.sandbox.profiles.fetch-nixpkgs-updates.profile} ${pkgs.git}/bin/git -C ${toString ~/Code/nixos/nixpkgs} fetch origin master";
   #   environment.HOME = "";
-  #   environment.NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+  #   environment = { inherit (config.environment.variables) NIX_SSL_CERT_FILE; };
   #   serviceConfig.KeepAlive = false;
   #   serviceConfig.ProcessType = "Background";
   #   serviceConfig.StartInterval = 360;

diff --git a/modules/services/cachix-agent.nix b/modules/services/cachix-agent.nix
@@ -61,7 +61,7 @@ in {
       path = [ config.nix.package pkgs.coreutils config.environment.systemPath ];
 
       environment = {
-        NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+        inherit (config.environment.variables) NIX_SSL_CERT_FILE;
         USER = "root";
       };
 

diff --git a/modules/services/gitlab-runner.nix b/modules/services/gitlab-runner.nix
@@ -551,7 +551,7 @@ in
     launchd.daemons.gitlab-runner = {
       environment = { #config.networking.proxy.envVars // {
         HOME = "${config.users.users.gitlab-runner.home}";
-        NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+        inherit (config.environment.variables) NIX_SSL_CERT_FILE;
       } // (if config.nix.useDaemon then { NIX_REMOTE = "daemon"; } else {});
       path = with pkgs; [
         bash

diff --git a/modules/services/hercules-ci-agent/default.nix b/modules/services/hercules-ci-agent/default.nix
@@ -27,7 +27,7 @@ in
 
       path = [ config.nix.package config.environment.systemPath ];
       environment = {
-        NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+        inherit (config.environment.variables) NIX_SSL_CERT_FILE;
       };
 
       serviceConfig.KeepAlive = true;

diff --git a/modules/services/ofborg/default.nix b/modules/services/ofborg/default.nix
@@ -63,7 +63,7 @@ in
       path = [ config.nix.package pkgs.bash pkgs.coreutils pkgs.curl pkgs.git ];
       environment =
         { RUST_BACKTRACE = "1";
-          NIX_SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+          inherit (config.environment.variables) NIX_SSL_CERT_FILE;
         };
 
       serviceConfig.KeepAlive = true;