mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
Ryan Yin
455c03d1fd
nixpkgs' security/ca.nix and nix-darwin's security/pki module both append "Comodo AAA Services root" to the cacert blacklist themselves, so the explicit entry only duplicated it. Removes WA-040. Assisted-by: Claude Code (claude-opus-5-5)
7 lines
144 B
Nix
7 lines
144 B
Nix
{
|
|
# Add my private PKI's CA certificate to the system-wide trust store.
|
|
security.pki.certificateFiles = [
|
|
../../certs/ecc-ca.crt
|
|
];
|
|
}
|