fix(rclone): correctly propagate RCLONE_NO_CHECK_CERTIFICATE env variable

Closes #688

packages/core/src/restic/helpers/__tests__/build-env.test.ts

@@ -261,6 +261,23 @@ describe("buildEnv", () => {
 		});
 	});
 
+	describe("rclone backend", () => {
+		test("sets RCLONE_NO_CHECK_CERTIFICATE when insecureTls is enabled", async () => {
+			const env = await buildEnvForTest(
+				withCustomPassword({
+					backend: "rclone" as const,
+					remote: "my-remote",
+					path: "/backups",
+					insecureTls: true,
+				}),
+				"org-1",
+			);
+
+			expect(env._INSECURE_TLS).toBe("true");
+			expect(env.RCLONE_NO_CHECK_CERTIFICATE).toBe("true");
+		});
+	});
+
 	describe("sftp backend", () => {
 		const baseSftpConfig = withCustomPassword({
 			backend: "sftp" as const,

packages/core/src/restic/helpers/build-env.ts

@@ -142,6 +142,10 @@ export const buildEnv = async (
 
 	if (config.insecureTls) {
 		env._INSECURE_TLS = "true";
+
+		if (config.backend === "rclone") {
+			env.RCLONE_NO_CHECK_CERTIFICATE = "true";
+		}
 	}
 
 	return env;