From 6ef578d644fe32a11a6cdb5eb0ecd01033acc0f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Sat, 6 Feb 2021 11:17:13 +0100
Subject: [PATCH] feat(hu-berlin): update vpn certs and make vpns contradict
 each other

---
 configs/hu-berlin.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/configs/hu-berlin.nix b/configs/hu-berlin.nix
index 32c0121..a7b46e2 100644
--- a/configs/hu-berlin.nix
+++ b/configs/hu-berlin.nix
@@ -63,17 +63,20 @@ in {
   systemd.services.hu-vpn = {
     enable = true;
     wants = [ "network-online.target" ];
+    conflicts = [ "openvpn-hu-berlin.service" ];
     script = ''
       ${pkgs.openfortivpn}/bin/openfortivpn -c ${pkgs.writeText "hu-berlin.config" ''
         host = forti-ssl.vpn.hu-berlin.de
         port = 443
-        trusted-cert = e5a7d56543002ffe1e8962caa5fd6d94053aa702381458247b670877a66f3c6f
+        trusted-cert = 42193a913d276d9eb86217612956e1e6464d6f07bed5393a4787c87adc4bd359
         username = ${eduroam.identity}
         password = ${eduroam.password}
       ''}
     '';
   };
 
+  systemd.services.openvpn-hu-berlin.conflicts = [ "hu-vpn.service" ];
+
   services.openvpn.servers.hu-berlin = {
     autoStart = false;
     authUserPass = {