my system configurations ^-^
feat: declare network profiles
+51
-2
+37
-2
modules/nixos/network/default.nix
+37
-2
modules/nixos/network/default.nix
···
1
-
{pkgs, ...}: {
1
+
{
2
+
config,
3
+
pkgs,
4
+
...
5
+
}: {
2
6
networking = {
3
7
hostName = "earthy";
4
-
networkmanager.enable = true;
8
+
networkmanager = {
9
+
enable = true;
10
+
# https://github.com/Janik-Haag/nm2nix
11
+
ensureProfiles = {
12
+
environmentFiles = [config.age.secrets.wifi.path];
13
+
14
+
# https://github.com/alyraffauf/nixcfg/blob/4ccc90fe11c63702879cf50b888ee460c185400d/common/wifi.nix
15
+
profiles = let
16
+
mkOpenWiFi = ssid: {
17
+
connection.id = "${ssid}";
18
+
connection.type = "wifi";
19
+
ipv4.method = "auto";
20
+
ipv6.addr-gen-mode = "default";
21
+
ipv6.method = "auto";
22
+
wifi.mode = "infrastructure";
23
+
wifi.ssid = "${ssid}";
24
+
};
25
+
26
+
mkWPA2WiFi = ssid: psk: (
27
+
(mkOpenWiFi ssid)
28
+
// {
29
+
wifi-security.auth-alg = "open";
30
+
wifi-security.key-mgmt = "wpa-psk";
31
+
wifi-security.psk = "${psk}";
32
+
}
33
+
);
34
+
in {
35
+
"UniFi HD" = mkWPA2WiFi "UniFi HD" "$UNIFI_HD";
36
+
"UniFi 5G" = mkWPA2WiFi "UniFi 5G" "$UNIFI_5G";
37
+
};
38
+
};
39
+
};
5
40
nameservers = ["1.1.1.1"];
6
41
firewall = {
7
42
enable = true;
+5
modules/nixos/nix/age.nix
+5
modules/nixos/nix/age.nix
+1
secrets/secrets.nix
+1
secrets/secrets.nix
+8
secrets/wifi.age
+8
secrets/wifi.age
···
1
+
age-encryption.org/v1
2
+
-> ssh-ed25519 lfRlnA FEXVPyycCNmHp2AAYMtkozZpksPs8BkhNxhBwfqmG3E
3
+
M4HU+npTrWEzNiBl2PL6IgF7lmBvIWCutqkUVNGKb1I
4
+
-> ssh-ed25519 T2rPTQ HrnfIcaq8CE878ToHXQCSbME+M+DLUYVgwgIo/u8AxY
5
+
PB29hbfibHbmXQ6LQVjNty2KwyWRwxXs0rKmlhpBmXk
6
+
--- l5zBLUBCyqqtXgAYRPrH1rgUbVk6ELccsH0CcGVoOI4
7
+
;d�,_�a�v4T��� �ӱ:0�G ��c�>��T5� �r ��
8
+
p��AJ@�l��R�R�'pF�3�Z�O:��