diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 4382570..2fc0b9e 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -144,6 +144,11 @@
   ];
 
   # set global environment variables
+  environment.variables = {
+    # make python's requests package use the global ca-certificates store, which will contain my own CA cert
+    REQUESTS_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+  };
+  # set user environment variables
   environment.sessionVariables = {
     # I don't know what this does, but it is needed for wluma to work correctly.
     # It will also slightly increase cpu usage (on wayland compositors), but shouldn't be too bad.