92 lines
2.7 KiB
Nix
92 lines
2.7 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
options.chvp.base.network.mobile = {
|
|
enable = lib.mkOption {
|
|
default = false;
|
|
example = true;
|
|
};
|
|
wireless-interface = lib.mkOption {
|
|
type = lib.types.str;
|
|
example = "wlp2s0";
|
|
};
|
|
wired-interfaces = lib.mkOption {
|
|
example = { "enp0s29f0u1u2" = { macAddress = "10:65:30:85:bb:18"; }; };
|
|
};
|
|
};
|
|
|
|
config = with config.chvp.base.network.mobile; lib.mkIf enable {
|
|
environment.systemPackages = [ pkgs.wpa_supplicant_gui ];
|
|
users.users.charlotte.extraGroups = [ "network" ];
|
|
users.groups.network = { };
|
|
networking = {
|
|
useDHCP = false;
|
|
wireless = {
|
|
enable = true;
|
|
interfaces = [ wireless-interface ];
|
|
environmentFile = config.age.secrets."passwords/networks.age".path;
|
|
userControlled = {
|
|
enable = true;
|
|
group = "network";
|
|
};
|
|
networks = {
|
|
"Public Universal Friend".psk = "@PSK_PUF@";
|
|
AndroidAP.psk = "@PSK_AndroidAP@";
|
|
draadloosnw.psk = "@PSK_draadloosnw@";
|
|
werknet.psk = "@PSK_werknet@";
|
|
Secorima.psk = "@PSK_Secorima@";
|
|
"Mediaraven Guest".psk = "@PSK_Mediaraven@";
|
|
"down".psk = "@PSK_down@";
|
|
"Zeus WPI" = {
|
|
psk = "@PSK_Zeus@";
|
|
hidden = true;
|
|
};
|
|
"Zeus Event 5G".psk = "@PSK_Zeus@";
|
|
"Rode Kruis-Gent (internet)".psk = "@PSK_RKG@";
|
|
eduroam = {
|
|
authProtocols = [ "WPA-EAP" ];
|
|
auth = ''
|
|
eap=PEAP
|
|
identity="@EDUROAM_USER@"
|
|
password="@EDUROAM_PASS@"
|
|
'';
|
|
extraConfig = ''
|
|
phase1="peaplabel=0"
|
|
phase2="auth=MSCHAPV2"
|
|
group=CCMP TKIP
|
|
ca_cert="${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
|
|
altsubject_match="DNS:radius.ugent.be"
|
|
'';
|
|
};
|
|
"GUK-huis".psk = "@PSK_GUKhuis@";
|
|
"DasNetwerk".psk = "@PSK_DasNetwerk@";
|
|
};
|
|
};
|
|
};
|
|
systemd.network = {
|
|
enable = true;
|
|
networks = {
|
|
"${wireless-interface}" = {
|
|
enable = true;
|
|
DHCP = "yes";
|
|
matchConfig = { Name = wireless-interface; };
|
|
dhcpV4Config = { RouteMetric = 20; };
|
|
ipv6AcceptRAConfig = { RouteMetric = 20; };
|
|
};
|
|
} // lib.mapAttrs
|
|
(name: attrs: {
|
|
enable = true;
|
|
DHCP = "yes";
|
|
matchConfig = { Name = name; };
|
|
dhcpV4Config = { RouteMetric = 10; };
|
|
ipv6AcceptRAConfig = { RouteMetric = 10; };
|
|
} // attrs)
|
|
wired-interfaces;
|
|
wait-online.anyInterface = true;
|
|
};
|
|
|
|
age.secrets."passwords/networks.age" = {
|
|
file = ../../../secrets/passwords/networks.age;
|
|
};
|
|
};
|
|
}
|