From b93dc9f16b00b74ab6f3d6c58eb5fcfc84c1286d Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Mon, 19 May 2025 18:43:38 +0200
Subject: [PATCH] configuration/common: Make Python requests always use system
 CA

---
 configuration/common/certificates.nix | 9 +++++++++
 configuration/common/default.nix      | 1 +
 2 files changed, 10 insertions(+)
 create mode 100644 configuration/common/certificates.nix

diff --git a/configuration/common/certificates.nix b/configuration/common/certificates.nix
new file mode 100644
index 0000000..ab443fe
--- /dev/null
+++ b/configuration/common/certificates.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+
+{
+
+  environment.sessionVariables = {
+    REQUESTS_CA_BUNDLE = config.security.pki.caBundle;
+  };
+
+}
diff --git a/configuration/common/default.nix b/configuration/common/default.nix
index 6d599f5..3c07706 100644
--- a/configuration/common/default.nix
+++ b/configuration/common/default.nix
@@ -3,6 +3,7 @@
 {
   imports = [
     ./backup.nix
+    ./certificates.nix
     ./initrd.nix
     ./locale.nix
     ./networking.nix