From e1f21c2a2af0f6a1f46b3b8bd6c0f6a75f0edb50 Mon Sep 17 00:00:00 2001
From: Joakim Repomaa <joakim.repomaa@mocoapp.com>
Date: Fri, 20 Feb 2026 20:48:42 +0200
Subject: [PATCH] add ca certs

---
 flake.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/flake.nix b/flake.nix
index 29175b7..3ad85d9 100644
--- a/flake.nix
+++ b/flake.nix
@@ -155,9 +155,14 @@
                           busybox
                         ];
                       };
-                      config.Env = [
-                        "NIX_CONFIG=experimental-features = nix-command flakes"
-                      ];
+                      config = {
+                        User = "node";
+                        Env = [
+                          "NIX_CONFIG=experimental-features = nix-command flakes"
+                          "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+                          "NODE_EXTRA_CA_CERTS=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+                        ];
+                      };
                     };
                   }
                 )