fatteh: configure 39c3 networking

configs/ccc.nix

@@ -1,29 +1,38 @@
-{pkgs, ...}:
+{ pkgs, ... }:
-# https://paste.sr.ht/~erictapen/11716989e489b600f237041b6d657fdf0ee17b34
+{
-let
+  networking.networkmanager.ensureProfiles.profiles = {
-  name = "dst-root-ca-x3.pem";
+    "39C3" = {
-  certificate = pkgs.stdenv.mkDerivation {
+      connection = {
-    inherit name;
+        id = "39C3";
-    src = builtins.toFile "${name}.sed" ''
+        type = "wifi";
-      1,/DST Root CA X3/d
+      };
-      1,/-----END CERTIFICATE-----/p
+      wifi = {
-    '';
+        mode = "infrastructure";
-    nativeBuildInputs = with pkgs; [cacert gnused];
+        ssid = "39C3";
-    phases = "installPhase";
+      };
-    installPhase = ''
+      wifi-security = {
-      ${pkgs.gnused}/bin/sed -n -f $src ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt > $out
+        auth-alg = "open";
-    '';
+        key-mgmt = "wpa-eap";
-  };
+      };
-in {
+      "802-1x" = {
-  networking.wireless.networks."36C3" = {
+        anonymous-identity = "39C3";
-    auth = ''
+        eap = "ttls;";
-      key_mgmt=WPA-EAP
+        identity = "39C3";
-      eap=TTLS
+        password = "39C3";
-      identity="kmein"
+        phase2-auth = "pap";
-      password=" "
+        altsubject-matches = "DNS:radius.c3noc.net";
-      ca_cert="${certificate}"
+        ca-cert = "${builtins.fetchurl {
-      altsubject_match="DNS:radius.c3noc.net"
+          url = "https://letsencrypt.org/certs/isrgrootx1.pem";
-      phase2="auth=PAP"
+          sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
-    '';
+        }}";
+      };
+      ipv4 = {
+        method = "auto";
+      };
+      ipv6 = {
+        addr-gen-mode = "default";
+        method = "auto";
+      };
+    };
   };
 }

configs/default.nix

@@ -199,7 +199,6 @@ in
     ./bash.nix
     ./bluetooth.nix
     ./aerc.nix
-    ./ccc.nix
     ./khal.nix
     ./browser.nix
     ./clipboard.nix

systems/fatteh/configuration.nix

@@ -7,6 +7,7 @@
     ./hardware-configuration.nix
     ../../configs/networkmanager.nix
     ../../configs/default.nix
+    ../../configs/ccc.nix
     ../../configs/gaming.nix
     # ../../configs/gnome.nix
   ];