commit 43a1f18c34a6989bda435c2819435b4d9824b8c3 · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

nixos/pki: change `certificateFiles`'s example to DN42 root cert

The original example is not a good example, `pkgs.cacert` does not need to appear in `security.pki.certificateFiles`, instead, `certificateFiles` will eventually override the input of pkgs.cacert to build the final `caBundle`. Replacing the example with DN42 will both remind users that we are now packaging DN42's root certificates and eliminate the confusion in the previous example.

Cryolitia PukNgae 6 months ago 43a1f18c ade3f11e

options

unified split

Changed files

+1 -1

nixos

modules

security

ca.nix

+1 -1

nixos/modules/security/ca.nix

···

       40
       40
        
           security.pki.certificateFiles = lib.mkOption {

     

       41
       41
        
             type = lib.types.listOf lib.types.path;

     

       42
       42
        
             default = [ ];

     

       43
       43
       -
             example = lib.literalExpression ''[ "''${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" ]'';

     

       43
       43
       +
             example = lib.literalExpression ''[ "''${pkgs.dn42-cacert}/etc/ssl/certs/dn42-ca.crt" ]'';

     

       44
       44
        
             description = ''

     

       45
       45
        
               A list of files containing trusted root certificates in PEM

     

       46
       46
        
               format. These are concatenated to form