{ config, ... }: { environment.sessionVariables = { REQUESTS_CA_BUNDLE = config.security.pki.caBundle; }; }