# Pastebin eUvaBcfw
{
  pkgs ? import <nixpkgs> {}
}:
  with pkgs;
  let
    publicCert = "${cacert}/etc/ssl/certs/ca-bundle.crt";
    mozillaCert = ./cacert.pem;
  in
    ipxe.overrideAttrs (attrs: rec {
      makeFlags = attrs.makeFlags ++ [
        "EMBED=${./menu.ipxe}"
        "TRUST=${./google.com.crt}"
        "CERT=${./google.com.crt}"
        "DEBUG=tls,x509:3,certstore,privkey"
      ];
      enabledOptions = attrs.enabledOptions ++ [ "CERT_CMD" ];
    })