summaryrefslogtreecommitdiff
path: root/modules/desktop
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-29 00:43:27 -0700
committerFuwn <[email protected]>2024-09-29 00:43:27 -0700
commit94de87ed74d42cc17797a3bdb297e43c0478efc0 (patch)
treecf9b3425632b7363a4376d42a76c4cb8b2a75533 /modules/desktop
parentpki: add nextdns ca (diff)
downloadnixos-config-94de87ed74d42cc17797a3bdb297e43c0478efc0.tar.xz
nixos-config-94de87ed74d42cc17797a3bdb297e43c0478efc0.zip
pki: move to core
Diffstat (limited to 'modules/desktop')
-rw-r--r--modules/desktop/security/default.nix1
-rw-r--r--modules/desktop/security/pki.nix47
2 files changed, 0 insertions, 48 deletions
diff --git a/modules/desktop/security/default.nix b/modules/desktop/security/default.nix
index 7a571a9..c1c084c 100644
--- a/modules/desktop/security/default.nix
+++ b/modules/desktop/security/default.nix
@@ -6,7 +6,6 @@
./doas.nix
./kernel.nix
./pam.nix
- ./pki.nix
./polkit.nix
./sudo.nix
];
diff --git a/modules/desktop/security/pki.nix b/modules/desktop/security/pki.nix
deleted file mode 100644
index c781040..0000000
--- a/modules/desktop/security/pki.nix
+++ /dev/null
@@ -1,47 +0,0 @@
-{ pkgs, ... }:
-{
- security.pki = {
- certificateFiles = [
- (pkgs.fetchurl {
- url = "https://nextdns.io/ca";
- hash = "sha256-yl+2q4H/a8SLGv4Mt+g8+03uy9ihZxACbsj3uCTog34=";
- })
- ];
-
- caCertificateBlacklist = [
- "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
- "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-
- # China Financial Certification Authority
- "CFCA EV ROOT"
-
- # Chunghwa Telecom Co., Ltd
- "ePKI Root Certification Authority"
- "HiPKI Root CA - G1"
-
- # Dhimyotis
- "Certigna"
- "Certigna Root CA"
-
- # GUANG DONG CERTIFICATE AUTHORITY
- "GDCA TrustAUTH R5 ROOT"
-
- # Hongkong Post
- "Hongkong Post Root CA 3"
-
- # iTrusChina Co.,Ltd.
- "vTrus ECC Root CA"
- "vTrus Root CA"
-
- # Krajowa Izba Rozliczeniowa S.A.
- "SZAFIR ROOT CA2"
-
- # NetLock Kft.
- "NetLock Arany (Class Gold) Főtanúsítvány"
-
- # TAIWAN-CA
- "TWCA Root Certification Authority"
- "TWCA Global Root CA"
- ];
- };
-}