- security.pki.certificates = [
- (builtins.readFile ./Eriomem_SAS.1.pem)
- (builtins.readFile ./Eriomem_SAS.pem)
+ security.pki.certificates = let
+ cert = pkgs.fetchurl {
+ url = "http://downloads.e.eriomem.net/eriomemca.pem";
+ sha256 = "1ixx4c6j3m26j8dp9a3dkvxc80v1nr5aqgmawwgs06bskasqkvvh";
+ };
+ in [
+ (builtins.readFile cert)