From bccea3b076d4bbf67d7693fdd4d59edfa5e30492 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sat, 25 Jul 2026 19:00:11 +0900
Subject: [PATCH] base/journald-upload: verify server cert against CA bundle

---
 base/services/journald-upload.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/base/services/journald-upload.nix b/base/services/journald-upload.nix
index 6fb016d..f6ce4f5 100644
--- a/base/services/journald-upload.nix
+++ b/base/services/journald-upload.nix
@@ -9,7 +9,7 @@ in
       URL = "https://journald.pvv.ntnu.no:${toString config.services.journald.remote.port}";
       ServerKeyFile = "-";
       ServerCertificateFile = "-";
-      TrustedCertificateFile = "-";
+      TrustedCertificateFile = config.security.pki.caBundle;
     };
   };