nixos/paperless: Use security.pki.caBundle to automatically accept self-signed certificates

Without this self-signed certificates used by authentication providers will not work.

(cherry picked from commit 6833a678b9)
This commit is contained in:
provokateurin
2026-07-13 23:40:42 +02:00
committed by github-actions[bot]
parent fb5c6d6966
commit 919c375bb0

View File

@@ -24,6 +24,8 @@ let
GRANIAN_HOST = cfg.address;
GRANIAN_PORT = toString cfg.port;
GRANIAN_WORKERS_KILL_TIMEOUT = "60";
# django-allauth uses python requests, which doesn't use the systems CA bundle by default: https://requests.readthedocs.io/en/latest/user/advanced/#ca-certificates
REQUESTS_CA_BUNDLE = config.security.pki.caBundle;
}
// lib.optionalAttrs (config.time.timeZone != null) {
PAPERLESS_TIME_ZONE = config.time.timeZone;