nixos/pki: change `certificateFiles`'s example to DN42 root cert

lol

The original example is not a good example, `pkgs.cacert` does not need to appear in `security.pki.certificateFiles`, instead, `certificateFiles` will eventually override the input of pkgs.cacert to build the final `caBundle`. Replacing the example with DN42 will both remind users that we are now packaging DN42's root certificates and eliminate the confusion in the previous example.

authored by

Cryolitia PukNgae and committed by

Cryolitia PukNgae 7 months ago 43a1f18c ade3f11e

+1 -1

1 changed file

expand all

nixos

modules

security

ca.nix

+1 -1

nixos/modules/security/ca.nix

··· 40 40 security.pki.certificateFiles = lib.mkOption { 41 41 type = lib.types.listOf lib.types.path; 42 42 default = [ ]; 43 - example = lib.literalExpression ''[ "''${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" ]''; 43 + example = lib.literalExpression ''[ "''${pkgs.dn42-cacert}/etc/ssl/certs/dn42-ca.crt" ]''; 44 44 description = '' 45 45 A list of files containing trusted root certificates in PEM 46 46 format. These are concatenated to form