mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2024-11-15 13:23:11 +01:00
86 lines
2.3 KiB
Nix
86 lines
2.3 KiB
Nix
{ config, ... }:
|
|
{
|
|
age.secrets.tud = {
|
|
file = ../../../../secrets/thinkpad/tud.age;
|
|
};
|
|
networking = {
|
|
wireless.networks = {
|
|
eduroam = {
|
|
auth = ''
|
|
eap=TTLS
|
|
anonymous_identity="anonymous@tu-dresden.de"
|
|
ca_cert="/etc/ssl/certs/ca-certificates.crt"
|
|
domain_suffix_match="radius-eduroam.zih.tu-dresden.de"
|
|
identity="rose159e@tu-dresden.de"
|
|
password="@EDUROAM_AUTH@"
|
|
phase2="auth=PAP"
|
|
'';
|
|
extraConfig = ''
|
|
scan_ssid=1
|
|
'';
|
|
authProtocols = [ "WPA-EAP" ];
|
|
};
|
|
agdsn = {
|
|
auth = ''
|
|
eap=TTLS
|
|
anonymous_identity="wifi@agdsn.de"
|
|
ca_cert="/etc/ssl/certs/ca-certificates.crt"
|
|
domain_suffix_match="radius.agdsn.de"
|
|
identity="r5"
|
|
password="@AGDSN_WIFI_AUTH@"
|
|
phase2="auth=PAP"
|
|
'';
|
|
authProtocols = [ "WPA-EAP" ];
|
|
};
|
|
agdsn-office = {
|
|
auth = ''
|
|
eap=TTLS
|
|
anonymous_identity="wifi@agdsn.de"
|
|
ca_cert="/etc/ssl/certs/ca-certificates.crt"
|
|
domain_suffix_match="radius.agdsn.de"
|
|
identity="r5"
|
|
priority=5
|
|
proto=WPA2
|
|
password="@AGDSN_AUTH@"
|
|
phase2="auth=PAP"
|
|
'';
|
|
authProtocols = [ "WPA-EAP" ];
|
|
};
|
|
FSR = {
|
|
psk = "@FSR_PSK@";
|
|
authProtocols = [ "WPA-PSK" ];
|
|
};
|
|
"RoboLab Playground" = {
|
|
psk = "@ROBOLAB_PSK@";
|
|
authProtocols = [ "WPA-PSK" ];
|
|
extraConfig = "disabled=1";
|
|
};
|
|
};
|
|
openconnect.interfaces = {
|
|
TUD-A-Tunnel = {
|
|
# apparently device names have a character limit
|
|
protocol = "anyconnect";
|
|
gateway = "vpn2.zih.tu-dresden.de";
|
|
user = "rose159e@tu-dresden.de";
|
|
passwordFile = config.age.secrets.tud.path;
|
|
autoStart = false;
|
|
extraOptions = {
|
|
authgroup = "A-Tunnel-TU-Networks";
|
|
compression = "stateless";
|
|
};
|
|
};
|
|
TUD-C-Tunnel = {
|
|
protocol = "anyconnect";
|
|
gateway = "vpn2.zih.tu-dresden.de";
|
|
user = "rose159e@tu-dresden.de";
|
|
passwordFile = config.age.secrets.tud.path;
|
|
autoStart = false;
|
|
extraOptions = {
|
|
authgroup = "C-Tunnel-All-Networks";
|
|
compression = "stateless";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|