nixos/common/russian-trusted-ca.nix
Ivan Bushchik 97332e32d5
Create russian-trusted-ca.nix
Signed-off-by: Ivan Bushchik <ivabus@ivabus.dev>
2024-01-06 16:43:29 +03:00

14 lines
451 B
Nix

{ config, pkgs,... }:
let
root_ca = pkgs.fetchurl {
url = "https://gu-st.ru/content/lending/russian_trusted_root_ca_pem.crt";
hash = "sha256-k2pD/qbo5SW8wPgazZw9IbT8S5torOp5BtaYAFr8ZQQ=";
};
sub_ca = pkgs.fetchurl {
url = "https://gu-st.ru/content/lending/russian_trusted_sub_ca_pem.crt";
hash = "sha256-8K5YnzZ3TynvNkj3mEsI1C/M5vH/7rYjbXc9rrJ0TqY=";
};
in {
security.pki.certificateFiles = [ "${root_ca}" "${sub_ca}" ];
}