kitten.sh
1{ lib, config, ... }:
2
3with lib;
4let
5 cfg = config.modules.certs;
6in {
7 options.modules.certs = {
8 enable = mkOption {
9 default = true;
10 description = "CA Certificates";
11 type = types.bool;
12 };
13 };
14
15 config = mkIf cfg.enable {
16 security.pki.certificateFiles = [ ./certs/ca.crt ];
17 };
18}
19