pyrox.dev / nixpkgs
lol
fork atom

nixos/pki: change `certificateFiles`'s example to DN42 root cert

The original example is not a good example, `pkgs.cacert` does not need to appear in `security.pki.certificateFiles`, instead, `certificateFiles` will eventually override the input of pkgs.cacert to build the final `caBundle`. Replacing the example with DN42 will both remind users that we are now packaging DN42's root certificates and eliminate the confusion in the previous example.

Cryolitia PukNgae 43a1f18c ade3f11e

options
unified split
Changed files
+1 -1
nixos
modules
security
ca.nix
+1 -1
nixos/modules/security/ca.nix 
···

       
40

       
 

       
    security.pki.certificateFiles = lib.mkOption {


     

       
41

       
 

       
      type = lib.types.listOf lib.types.path;


     

       
42

       
 

       
      default = [ ];


     

       
43

       
-

       
      example = lib.literalExpression ''[ "''${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" ]'';


     

       
44

       
 

       
      description = ''


     

       
45

       
 

       
        A list of files containing trusted root certificates in PEM


     

       
46

       
 

       
        format. These are concatenated to form


     
···

       
40

       
 

       
    security.pki.certificateFiles = lib.mkOption {


     

       
41

       
 

       
      type = lib.types.listOf lib.types.path;


     

       
42

       
 

       
      default = [ ];


     

       
43

       
+

       
      example = lib.literalExpression ''[ "''${pkgs.dn42-cacert}/etc/ssl/certs/dn42-ca.crt" ]'';


     

       
44

       
 

       
      description = ''


     

       
45

       
 

       
        A list of files containing trusted root certificates in PEM


     

       
46

       
 

       
        format. These are concatenated to form