nixos/paperless: Use security.pki.caBundle to automatically accept self-signed certificates (#541608)

2026-07-23 16:33:35 +00:00
parent eb1e54bea7 6833a678b9
commit f27a38c33b
1 changed files with 2 additions and 0 deletions
@@ -24,6 +24,8 @@ let
    GRANIAN_HOST = cfg.address;
    GRANIAN_PORT = toString cfg.port;
    GRANIAN_WORKERS_KILL_TIMEOUT = "60";
+    # django-allauth uses python requests, which doesn't use the systems CA bundle by default: https://requests.readthedocs.io/en/latest/user/advanced/#ca-certificates
+    REQUESTS_CA_BUNDLE = config.security.pki.caBundle;
  }
  // lib.optionalAttrs (config.time.timeZone != null) {
    PAPERLESS_TIME_ZONE = config.time.timeZone;