From c329eb197dd8127f0bb6d5e03a8e36fa14db9f42 Mon Sep 17 00:00:00 2001
From: Charles Hall <charles@computer.surgery>
Date: Sat, 27 Jan 2024 16:27:00 -0500
Subject: [PATCH] add ca certificates to the OCI image

Without this, checking the authority of TLS certificates fails, making
Conduit (rightly) refuse to connect to anything.

Signed-off-by: strawberry <strawberry@puppygock.gay>
---
 flake.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/flake.nix b/flake.nix
index c3a352fa..443bdc15 100644
--- a/flake.nix
+++ b/flake.nix
@@ -177,6 +177,9 @@
         pkgs.dockerTools.buildImage {
           name = package.pname;
           tag = "main";
+          copyToRoot = [
+            pkgs.dockerTools.caCertificates
+          ];
           config = {
             # Use the `tini` init system so that signals (e.g. ctrl+c/SIGINT)
             # are handled as expected