Add sas cacerts

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/elara/configs/pki/default.nix

@@ -0,0 +1,15 @@
+{
+  config,
+  inputs,
+  system,
+  lib,
+  ...
+}:
+let
+  selfPkgs = inputs.self.packages.${system};
+in
+{
+  security.pki.certificateFiles = lib.lists.optionals config.sas.build.private [
+    "${selfPkgs.sas-cacert}/etc/ssl/certs/ca-bundle.crt"
+  ];
+}

hosts/elara/default.nix

@@ -49,6 +49,7 @@
     ../common/configs/system/zsh
 
     ./configs/git
+    ./configs/pki
     ./configs/vpn
 
     ./users/nikara