add ca certs

flake.nix

@@ -155,10 +155,15 @@
                           busybox
                         ];
                       };
-                      config.Env = [
+                      config = {
+                        User = "node";
+                        Env = [
                           "NIX_CONFIG=experimental-features = nix-command flakes"
+                          "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+                          "NODE_EXTRA_CA_CERTS=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
                         ];
                       };
+                    };
                   }
                 )
               );