noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2026-08-07 15:08:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

trust corporate MITM root CA on lookingglass for TLS-intercepting proxy

Browse Source
This commit is contained in:
Noah Masur
2026-08-03 15:58:12 -04:00
parent df38163999
commit f3a8d45722
3 changed files with 91 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/aarch64-darwin/lookingglass/default.nix
+10
View File
@@ -17,6 +17,16 @@ rec {
# gaming.enable = true;
};
# Corporate network runs a TLS-intercepting proxy. Trust its root CA so Nix
# fetches don't fail with "self-signed certificate in certificate chain". The
# cert lives outside this public repo at a root-owned, world-readable path so
# the unprivileged Nix build user can read it (a copy under $HOME is not
# traversable by nixbld). See docs/CHANGELOG.md to extract and install it.
nmasur.presets.security.corporateCa = {
enable = true;
certFile = "/etc/ssl/corp-ca/CorpCA.pem";
};
home-manager.users."Noah.Masur" = {
nmasur.settings = {
username = nmasur.settings.username;