network: rework wpa supplicant

This commit is contained in:
Rouven Seifert 2024-08-22 11:39:42 +02:00
parent f8561e3246
commit 076a7cacfe
4 changed files with 90 additions and 85 deletions

View file

@ -36,7 +36,7 @@
"2620:fe::9"
];
# allow downgrade since fritzbox at home doesn't support it (yet?)
dnssec = "allow-downgrade";
# dnssec = "allow-downgrade";
};
networking = {
nftables.enable = true;

View file

@ -1,4 +1,4 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
{
age.secrets = {
tud.file = ../../../../secrets/thinkpad/tud.age;
@ -8,15 +8,12 @@
};
};
networking = {
supplicant = rec {
enp0s31f6 = {
supplicant = {
"LAN" = {
userControlled.enable = true;
driver = "wired";
configFile.path = config.age.secrets.dyport-auth.path;
};
# ugly way to add more interfaces
# "enp0s13f0u2u1" = enp0s31f6;
# "enp0s13f0u3u1" = enp0s31f6;
};
wireless.networks = {
eduroam = {
@ -143,5 +140,9 @@
LockPersonality = true;
};
};
# fix systemd dependencies for supplicant services
"supplicant-lan@" = {
wantedBy = lib.mkForce [ ];
};
};
}