diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-06-29 18:09:59 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-06-30 16:13:35 +0200 |
| commit | 814b3399f355b645626cf03b0b6c45e37bc2bf8f (patch) | |
| tree | fc83c0911010e9ad0aa407b2506590141ecbf19e /hosts/nyaan/network.nix | |
| parent | 0044c98c0abc4b7ec3c37db8816e58c385d94234 (diff) | |
iwd-ext: add extra config lines field
In order to add embeds which are non-standard ini I added an
extraConfigLines field. Then I also had to fix substution so that I can
use a literal '@' in the extra lines. Still not perfect, but works
just well enough for me to set up eduroam correctly for my uni.
Diffstat (limited to 'hosts/nyaan/network.nix')
| -rw-r--r-- | hosts/nyaan/network.nix | 40 |
1 files changed, 32 insertions, 8 deletions
diff --git a/hosts/nyaan/network.nix b/hosts/nyaan/network.nix index 5730ead..347a802 100644 --- a/hosts/nyaan/network.nix +++ b/hosts/nyaan/network.nix @@ -84,16 +84,40 @@ in "eduroam" = { networkType = "8021x"; config.Security = { - EAP-Method = [ - "TTLS" - "PEAP" - "TLS" - ]; - EAP-Identity = "mbastaja@tvz.hr"; - EAP-AnonymousIdentity = "anonymous@tvz.hr"; - DomainSuffixMatch = "freeradius.tvz.hr"; + EAP-Method = "TTLS"; + EAP-Identity = "anonymous@tvz.hr"; + EAP-TTLS-CACert = "embed:eduroam_ca_cert"; + EAP-TTLS-ServerDomainMask = "freeradius.tvz.hr"; EAP-TTLS-Phase2-Method = "Tunneled-PAP"; + EAP-TTLS-Phase2-Identity = "mbastaja@tvz.hr"; + EAP-TTLS-Phase2-Password = "@EDUROAM_PASS@"; }; + config.Settings.AutoConnect = true; + extraConfigLines = '' + [@@pem@@eduroam_ca_cert] + -----BEGIN CERTIFICATE----- + MIIDjzCCAnegAwIBAgIBADANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJIUjEP + MA0GA1UECAwGWmFncmViMQ8wDQYDVQQHDAZaYWdyZWIxDDAKBgNVBAoMA1RWWjEj + MCEGA1UEAwwaQ0EgUm9vdCBjZXJ0aWZpY2F0ZSB0dnouaHIwHhcNMTcwNzE0MTE1 + MzUzWhcNMjcwNzEyMTE1MzUzWjBiMQswCQYDVQQGEwJIUjEPMA0GA1UECAwGWmFn + cmViMQ8wDQYDVQQHDAZaYWdyZWIxDDAKBgNVBAoMA1RWWjEjMCEGA1UEAwwaQ0Eg + Um9vdCBjZXJ0aWZpY2F0ZSB0dnouaHIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw + ggEKAoIBAQC+/60HDgUIMu3F61a0iihkxoAgGJpbaz8bu9WEaKNURFXMW/9FWIPf + xBQbYr3RFaPdpgTLKwtP8ZcCNqH4QM8bwBirk7gMjeNQfUc0DcC1xj0yCjWTLx7L + CxWzOPI/3QZdjlltV5g1bL0nObBXJTqLpJazfJa+c5rMSjuxeHQtOts4h9cPT+3c + Lc21IF3l0Ck4XjNrYMDuBq0B24ukkwqHkTzp5CyJk1gn4Bsr5RskUsgvbAQBacPd + EjwjzJPlMSMpcZw87e+U22FWuhkDEMf+nKtOPxbDz0P1rdXwtsLyYww3gx/ZjzZy + pnNJJDa+K008GJsOtRCgy1O82rOskHVxAgMBAAGjUDBOMB0GA1UdDgQWBBSJ843O + 80eWXlzlc5L2e5NSmJt8VTAfBgNVHSMEGDAWgBSJ843O80eWXlzlc5L2e5NSmJt8 + VTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQBwrBXWaKBkL3vZBtDs + Ebez/E2vU8OSWt53l8gDgPoWVd66qh3k76IkwcW9OB3JwZpY63ZYTC/J+by4/hZh + f5l2AWjjW5sasXz3HlNUexJomk1llLvDJt/eKuTM/5k3LzgbAhmjhzE7Jh3wZJF5 + rKOQ9fN7zJ414EebjkeGSgDosq3ip290vFiBc+heqgdfZsDdyxuIKkJCtYYYI8hP + UcKRfJ4nr8enAVkbbjElc5qF7s2Gz0+0owI7ZV/KaXd2ZGcnh6nRx5OIcDGXNLK9 + I87CtgF5KX0AGXEMJeG/Jms9hDdn18SXwxIgG6jX7DlAUsz/PVcwDNxF3RCHvsuy + HoU+ + -----END CERTIFICATE----- + ''; }; "Students-TVZ" = { networkType = "8021x"; |