about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <tazjin@google.com>2019-12-18T20·02+0000
committerVincent Ambo <tazjin@google.com>2019-12-18T20·02+0000
commitd6a653d7a3d67c87b086686069e91d44546862eb (patch)
treedcb9bbe3d77d3aa827197f797c8bc5a07a9a3822
parent9448326b9b841bf00def7803d9a18248b733c33c (diff)
fix(cgit-taz): Explicitly configure CA certs for git r/190
-rw-r--r--services/cgit-taz/default.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/services/cgit-taz/default.nix b/services/cgit-taz/default.nix
index 3ac1be0b8943..425c136ec419 100644
--- a/services/cgit-taz/default.nix
+++ b/services/cgit-taz/default.nix
@@ -58,7 +58,9 @@ in writeShellScriptBin "cgit-launch" ''
 
   # The cookie file is placed in the correct location by Kubernetes, based on
   # information stored in a secret.
-  ${git}/bin/git clone --mirror -c http.cookieFile=/var/cgit/gitcookies \
+  ${git}/bin/git clone --mirror \
+    -c http.cookieFile=/var/cgit/gitcookies \
+    -c http.sslcainfo=${cacert}/etc/ssl/certs/ca-bundle.crt \
     https://source.developers.google.com/p/tazjins-infrastructure/r/depot \
     /srv/git/depot