From bdf77c9149375efdbf6b294f472c8cf734211a9b Mon Sep 17 00:00:00 2001
From: Alexander Wainwright <code@figtree.dev>
Date: Thu, 15 Jan 2026 11:29:02 +1000
Subject: [PATCH] Add alt.local caddy root certificate

---
 hosts/modules/certs/alt-caddy.crt | 11 +++++++++++
 hosts/modules/desktop.nix         |  5 +++++
 2 files changed, 16 insertions(+)
 create mode 100644 hosts/modules/certs/alt-caddy.crt

diff --git a/hosts/modules/certs/alt-caddy.crt b/hosts/modules/certs/alt-caddy.crt
new file mode 100644
index 0000000..300bec4
--- /dev/null
+++ b/hosts/modules/certs/alt-caddy.crt
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/hosts/modules/desktop.nix b/hosts/modules/desktop.nix
index 47f10b3..f3c2443 100644
--- a/hosts/modules/desktop.nix
+++ b/hosts/modules/desktop.nix
@@ -9,6 +9,11 @@
     };
   };
 
+  # Trust the Caddy Local Authority
+  security.pki.certificateFiles = [
+    ./certs/alt-caddy.crt
+  ];
+
   services.displayManager.gdm = {
     enable = true;
     wayland = true;