From 29b898d2041239e38ebc30f7db406085ea9a5aac Mon Sep 17 00:00:00 2001
From: Infinidoge <infinidoge@inx.moe>
Date: Fri, 28 Jun 2024 11:44:03 -0400
Subject: [PATCH] global/security: add inx.moe root certs

---
 modules/global/security.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/modules/global/security.nix b/modules/global/security.nix
index dd5059c..2ebd485 100644
--- a/modules/global/security.nix
+++ b/modules/global/security.nix
@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ config, lib, pkgs, ... }:
 with lib;
 let
   inherit (config.nixpkgs.hostPlatform) system;
@@ -17,6 +17,16 @@ in
         environmentFile = config.secrets.cloudflare;
       };
     };
+    pki.certificateFiles = [
+      (pkgs.fetchurl {
+        url = "https://files.inx.moe/ca/ca.cert.pem";
+        hash = "sha256-YZKiWLnO7uSHYJeNfTVxN87xMSPbJC7iTif3lMtUxpI=";
+      })
+      (pkgs.fetchurl {
+        url = "https://files.inx.moe/ca/intermediate.cert.pem";
+        hash = "sha256-NpVi8Uv2IaxCq+laQp+YL1xrJeIFeDZv5SKAWT1bzGQ=";
+      })
+    ];
   };
 
   hardware = {