From 2bd22bdda2930cdac4bacb068ac7a4ba901712f4 Mon Sep 17 00:00:00 2001
From: mfyuu <83203852+mfyuu@users.noreply.github.com>
Date: Fri, 27 Feb 2026 11:31:55 +0900
Subject: [PATCH 1/2] fix(M4Pro): add corporate SSL certificate config for
 deno, node, and git

---
 hosts/M4Pro/default.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/hosts/M4Pro/default.nix b/hosts/M4Pro/default.nix
index 596a582..ab8d5b6 100644
--- a/hosts/M4Pro/default.nix
+++ b/hosts/M4Pro/default.nix
@@ -1,4 +1,14 @@
 { ... }:
+let
+  customCert = "/Users/mfyuu/.local/share/ca-certificates/corp.pem";
+in
 {
-  # M4Pro-specific configuration
+  # M4Pro-specific configuration (corporate SSL certificate)
+  home-manager.users.mfyuu = {
+    home.sessionVariables = {
+      DENO_CERT = customCert;
+      NODE_EXTRA_CA_CERTS = customCert;
+    };
+    programs.git.settings.http.sslCAInfo = customCert;
+  };
 }

From 8f4a55ad96d8dde18c3a582c8c31145923ff32c2 Mon Sep 17 00:00:00 2001
From: mfyuu <83203852+mfyuu@users.noreply.github.com>
Date: Fri, 27 Feb 2026 11:42:52 +0900
Subject: [PATCH 2/2] fix(ci): use GIT_SSL_CAINFO env var instead of git config
 sslCAInfo

- programs.git.settings.http.sslCAInfo writes to .config/git/config
- CI symlinks home-manager output, so sslCAInfo leaks into the runner
- runner has no cert file at that path, causing git fetch to fail
- use GIT_SSL_CAINFO env var instead (not written to git config)
---
 hosts/M4Pro/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/M4Pro/default.nix b/hosts/M4Pro/default.nix
index ab8d5b6..209c306 100644
--- a/hosts/M4Pro/default.nix
+++ b/hosts/M4Pro/default.nix
@@ -8,7 +8,7 @@ in
     home.sessionVariables = {
       DENO_CERT = customCert;
       NODE_EXTRA_CA_CERTS = customCert;
+      GIT_SSL_CAINFO = customCert;
     };
-    programs.git.settings.http.sslCAInfo = customCert;
   };
 }