From 3c9620f9737a9f45abeba7328111462373f614f7 Mon Sep 17 00:00:00 2001
From: Nico <47644445+nicotsx@users.noreply.github.com>
Date: Sat, 21 Mar 2026 20:42:22 +0100
Subject: [PATCH] fix(rclone): correctly propagate RCLONE_NO_CHECK_CERTIFICATE
 env variable (#692)

Closes #688
---
 .../restic/helpers/__tests__/build-env.test.ts  | 17 +++++++++++++++++
 packages/core/src/restic/helpers/build-env.ts   |  4 ++++
 2 files changed, 21 insertions(+)

diff --git a/packages/core/src/restic/helpers/__tests__/build-env.test.ts b/packages/core/src/restic/helpers/__tests__/build-env.test.ts
index 8f8bf5a4..d5bc857d 100644
--- a/packages/core/src/restic/helpers/__tests__/build-env.test.ts
+++ b/packages/core/src/restic/helpers/__tests__/build-env.test.ts
@@ -261,6 +261,23 @@ describe("buildEnv", () => {
 		});
 	});
 
+	describe("rclone backend", () => {
+		test("sets RCLONE_NO_CHECK_CERTIFICATE when insecureTls is enabled", async () => {
+			const env = await buildEnvForTest(
+				withCustomPassword({
+					backend: "rclone" as const,
+					remote: "my-remote",
+					path: "/backups",
+					insecureTls: true,
+				}),
+				"org-1",
+			);
+
+			expect(env._INSECURE_TLS).toBe("true");
+			expect(env.RCLONE_NO_CHECK_CERTIFICATE).toBe("true");
+		});
+	});
+
 	describe("sftp backend", () => {
 		const baseSftpConfig = withCustomPassword({
 			backend: "sftp" as const,
diff --git a/packages/core/src/restic/helpers/build-env.ts b/packages/core/src/restic/helpers/build-env.ts
index aef0bc7d..9f50adc1 100644
--- a/packages/core/src/restic/helpers/build-env.ts
+++ b/packages/core/src/restic/helpers/build-env.ts
@@ -142,6 +142,10 @@ export const buildEnv = async (
 
 	if (config.insecureTls) {
 		env._INSECURE_TLS = "true";
+
+		if (config.backend === "rclone") {
+			env.RCLONE_NO_CHECK_CERTIFICATE = "true";
+		}
 	}
 
 	return env;