mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-07-19 08:31:01 +03:00
1a4575f9db
Previously some modules used `config.environment.etc."ssl/certs/ca-certificates.crt".source`, some used `"/etc/ssl/certs/ca-certificates.crt"`, and some used `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"`. These were all bad in one way or another:
- `config.environment.etc."ssl/certs/ca-certificates.crt".source` relies on `source` being set; if `text` is set instead this breaks, introducing a weird undocumented requirement
- `"/etc/ssl/certs/ca-certificates.crt"` is probably okay but very un-nix. It's a magic string, and the path doesn't change when the file changes (and so you can't trigger service reloads, for example, when the contents change in a new system activation)
- `"${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"` silently doesn't include the options from `security.pki`
Co-authored-by: Shelvacu <git@shelvacu.com>
|
||
|---|---|---|
| .. | ||
| alsa.nix | ||
| botamusique.nix | ||
| gmediarender.nix | ||
| gonic.nix | ||
| goxlr-utility.nix | ||
| hqplayerd.nix | ||
| icecast.nix | ||
| jack.nix | ||
| jmusicbot.nix | ||
| liquidsoap.nix | ||
| marytts.nix | ||
| mopidy.nix | ||
| mpd.nix | ||
| mpdscribble.nix | ||
| music-assistant.nix | ||
| mympd.nix | ||
| navidrome.nix | ||
| networkaudiod.nix | ||
| pulseaudio.nix | ||
| roon-bridge.nix | ||
| roon-server.nix | ||
| slimserver.nix | ||
| snapserver.nix | ||
| spotifyd.nix | ||
| squeezelite.nix | ||
| tts.nix | ||
| ympd.nix | ||