From e1ff6899f637ff0b4808994d66e982a885bcd150 Mon Sep 17 00:00:00 2001
From: Timo Wilken
Date: Fri, 28 Apr 2023 21:30:35 +0200
Subject: Use proper SSL cert path

This avoids relying on nss-certs being installed system-wide.
---
 tw/services/nextcloud.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'tw/services/nextcloud.scm')

diff --git a/tw/services/nextcloud.scm b/tw/services/nextcloud.scm
index 6f723f93..4cc6c021 100644
--- a/tw/services/nextcloud.scm
+++ b/tw/services/nextcloud.scm
@@ -1,5 +1,6 @@
 (define-module (tw services nextcloud)
   #:use-module (gnu)
+  #:use-module (gnu packages certs)
   #:use-module (gnu packages php)
   #:use-module (gnu services certbot)
   #:use-module (gnu services mcron)
@@ -104,8 +105,7 @@ Header always set Strict-Transport-Security \"max-age=15552000\"
           (list #~(job "*/5 * * * *"
                        (lambda ()
                          ;; Nextcloud News needs this to fetch HTTPS feeds.
-                         (setenv "SSL_CERT_DIR" "/run/current-system/profile/etc/ssl/certs")
-                         (setenv "SSL_CERT_FILE" "/run/current-system/profile/etc/ssl/certs/ca-certificates.crt")
+                         (setenv "SSL_CERT_DIR" #$(file-append nss-certs "/etc/ssl/certs"))
                          (chdir "/var/www/nextcloud")
                          ;; `setgid' first while we're still root
                          (setgid (group:gid (getgr "httpd")))
-- 
cgit v1.2.3