{ runCommand, writeScript, execline, cacert, nix }:
let
  runscript = writeScript "nix-daemon.run" ''
    #!${execline}/bin/execlineb -P
    export SSL_CERT_FILE     ${cacert}/etc/ssl/certs/ca-bundle.crt
    export NIX_SSL_CERT_FILE ${cacert}/etc/ssl/certs/ca-bundle.crt
    ${nix}/bin/nix-daemon
  '';
in runCommand "nix-daemon.sv" { inherit runscript; } ''
  mkdir -p $out
  cp $runscript $out/run
  ln -s /run/runit/supervise.nix-daemon $out/supervise
''