From cd6cb7987bfe31f2ef675e90e58167265c4d6de9 Mon Sep 17 00:00:00 2001
From: Rafael Irgolic <hello@irgolic.com>
Date: Sat, 24 Oct 2026 17:26:35 +0000
Subject: [PATCH] rainloop-community: use cacert bundle instead of vendored CA
 bundle

Assisted-by: Claude Code (Claude Opus 5.5) with patchix
---
 pkgs/servers/rainloop/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkgs/servers/rainloop/default.nix b/pkgs/servers/rainloop/default.nix
index 10ed51bd039a..6fc796bbc0f6 100644
--- a/pkgs/servers/rainloop/default.nix
+++ b/pkgs/servers/rainloop/default.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchurl,
+  cacert,
   unzip,
   writeText,
   dos2unix,
@@ -59,6 +60,9 @@ let
       installPhase = ''
         mkdir $out
         cp -r rainloop/* $out
+        rm $out/rainloop/v/${version}/app/libraries/tmhOAuth/cacert.pem
+        ln -s ${cacert}/etc/ssl/certs/ca-bundle.crt \
+          $out/rainloop/v/${version}/app/libraries/tmhOAuth/cacert.pem
         rm -rf $out/data
         cp ${includeScript} $out/include.php
         mkdir $out/data