From d6a653d7a3d67c87b086686069e91d44546862eb Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@google.com>
Date: Wed, 18 Dec 2019 20:02:17 +0000
Subject: fix(cgit-taz): Explicitly configure CA certs for git

---
 services/cgit-taz/default.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'services')

diff --git a/services/cgit-taz/default.nix b/services/cgit-taz/default.nix
index 3ac1be0b8943..425c136ec419 100644
--- a/services/cgit-taz/default.nix
+++ b/services/cgit-taz/default.nix
@@ -58,7 +58,9 @@ in writeShellScriptBin "cgit-launch" ''
 
   # The cookie file is placed in the correct location by Kubernetes, based on
   # information stored in a secret.
-  ${git}/bin/git clone --mirror -c http.cookieFile=/var/cgit/gitcookies \
+  ${git}/bin/git clone --mirror \
+    -c http.cookieFile=/var/cgit/gitcookies \
+    -c http.sslcainfo=${cacert}/etc/ssl/certs/ca-bundle.crt \
     https://source.developers.google.com/p/tazjins-infrastructure/r/depot \
     /srv/git/depot
 
-- 
cgit 1.4.1