{ config, lib, ... }: with lib; { environment.sessionVariables = { REQUESTS_CA_BUNDLE = mkDefault config.security.pki.caBundle; }; }