ca: add certificates in /etc/ssl/certs

modules/environment/ca.nix

@@ -0,0 +1,37 @@
+# Copyright (c) 2019-2021, see AUTHORS. Licensed under MIT License, see LICENSE.
+
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  certificate = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+in
+
+{
+
+  ###### interface
+
+  options = {
+
+  };
+
+
+  ###### implementation
+
+  config = {
+
+    environment.etc = {
+      # NixOS canonical location + Debian/Ubuntu/Arch/Gentoo compatibility.
+      "ssl/certs/ca-certificates.crt".source = certificate;
+
+      # Old NixOS compatibility.
+      "ssl/certs/ca-bundle.crt".source = certificate;
+
+      # CentOS/Fedora compatibility.
+      "pki/tls/certs/ca-bundle.crt".source = certificate;
+    };
+
+  };
+
+}

modules/module-list.nix

@@ -5,6 +5,7 @@
 [
   ./build/activation.nix
   ./build/config.nix
+  ./environment/ca.nix
   ./environment/etc
   ./environment/links.nix
   ./environment/login