underworld: add employer certificate, openconnect

3 files changed, 43 insertions, 0 deletions

diff --git a/hosts/underworld/default.nix b/hosts/underworld/default.nix
index f39567d..d4394ac 100644
--- a/hosts/underworld/default.nix
+++ b/hosts/underworld/default.nix
@@ -85,6 +85,8 @@
     #media-session.enable = true;
   };
 
+  security.pki.certificateFiles = [ ../../share/certs.crt ];
+
   users.users = {
     osiris = {
       isNormalUser = true;
diff --git a/share/certs.crt b/share/certs.crt
new file mode 100644
index 0000000..3579fae
--- /dev/null
+++ b/share/certs.crt
@@ -0,0 +1,40 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/share/home/dev-stuff.nix b/share/home/dev-stuff.nix
index 3f1c28e..d1c0c01 100644
--- a/share/home/dev-stuff.nix
+++ b/share/home/dev-stuff.nix
@@ -85,6 +85,7 @@ in
       minisign
       openscad
       openscad-lsp
+      openconnect
 
       # TUI/GUI
       zed-editor