joachim/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

dustbowl: Add Telekom root certificate to /etc/

Browse source
This commit is contained in:
joachimschmidt557 2021-12-14 12:44:57 +01:00
parent 9b3a94b3a3
commit 3d69c0797d
No known key found for this signature in database
GPG key ID: E0B575BE2884ACC5
1 changed files with 6 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

21
nixos/dustbowl.nix
View file

@ -58,6 +58,12 @@
networking.useDHCP = false;
networking.interfaces.wlp2s0.useDHCP = true;
# Add TeleSec root certificate to /etc/ explicitly for eduroam
environment.etc."ssl/certs/T-TeleSec_GlobalRoot_Class_2.pem".source = pkgs.fetchurl {
url = "https://www.pki.dfn.de/fileadmin/PKI/zertifikate/T-TeleSec_GlobalRoot_Class_2.pem";
sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
};
# services.dnscrypt-proxy2 = {
# enable = true;
# settings = {
@ -215,19 +221,6 @@
let args = [ "-f" "/etc/bluetooth/main.conf" "-E" ];
in lib.mkForce [ "" "${config.hardware.bluetooth.package}/libexec/bluetooth/bluetoothd ${lib.escapeShellArgs args}" ];
systemd.user.services.mpris-proxy = {
description = "Bluetooth mpris-player";
wantedBy = [ "graphical-session.target" ];
partOf = [ "graphical-session.target" ];
serviceConfig = {
ExecStart = ''
${config.hardware.bluetooth.package}/bin/mpris-proxy
'';
RestartSec = 3;
Restart = "always";
};
};
# UPower
services.upower.enable = true;
@ -312,8 +305,6 @@
};
};
virtualisation.virtualbox.host.enable = true;
virtualisation.libvirtd.enable = true;
users.users.joachim = {