kfm/niveum
1
0
Fork 0
mirror of https://github.com/kmein/niveum synced 2026-03-16 10:11:08 +01:00
Code Releases Activity

fix: openvpn

Browse Source
This commit is contained in:
Kierán Meinhardt
2020-01-18 08:02:02 +01:00
parent 92b506a601
commit 3dcad1caca
1 changed files with 12 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
configs/hu-berlin.nix
View File

@@ -1,8 +1,9 @@
{ pkgs, lib, ... }:
let
inherit (lib.strings) fileContents;
eduroam = {
identity = lib.strings.fileContents <shared-secrets/eduroam/identity>;
password = lib.strings.fileContents <shared-secrets/eduroam/password>;
identity = fileContents <shared-secrets/eduroam/identity>;
password = fileContents <shared-secrets/eduroam/password>;
};
eduroamAuth = ''
key_mgmt=WPA-EAP
@@ -18,29 +19,21 @@ let
}}"
phase2="auth=PAP"
'';
only-hu-traffic = true;
in {
networking.wireless.networks = {
eduroam_5GHz.auth = eduroamAuth;
eduroam.auth = eduroamAuth;
};
services.openvpn.servers = {
hu-berlin = {
config = ''
config ${pkgs.fetchurl {
url = https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn;
sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
}}
${lib.optionalString only-hu-traffic ''
route-nopull
route 141.20.0.0 255.255.0.0
''}
'';
authUserPass = {
username = eduroam.identity;
password = eduroam.password;
};
services.openvpn.servers.hu-berlin = {
autoStart = false;
authUserPass = {
username = eduroam.identity;
password = eduroam.password;
};
config = fileContents (pkgs.fetchurl {
url = https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn;
sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
});
};
}