diff --git a/configs/ccc.nix b/configs/ccc.nix
new file mode 100644
index 0000000..61c4813
--- /dev/null
+++ b/configs/ccc.nix
@@ -0,0 +1,34 @@
+{ pkgs, ... }:
+# https://paste.sr.ht/~erictapen/11716989e489b600f237041b6d657fdf0ee17b34
+let
+  certificate = pkgs.stdenv.mkDerivation rec {
+    name = "dst-root-ca-x3.pem";
+    src = builtins.toFile "${name}.awk" ''
+      {
+        if(a > 0) { print }
+      }
+
+      /-----END CERTIFICATE-----/ { a = 0 }
+
+      /DST Root CA X3/ { a = 1 }
+    '';
+    nativeBuildInputs = with pkgs; [ cacert gawk ];
+    phases = "installPhase";
+    installPhase = ''
+      ${pkgs.gawk}/bin/awk -f $src ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt > $out
+    '';
+  };
+in
+{
+  networking.wireless.networks."36C3" = {
+    auth = ''
+      key_mgmt=WPA-EAP
+      eap=TTLS
+      identity="kmein"
+      password=" "
+      ca_cert="${certificate}"
+      altsubject_match="DNS:radius.c3noc.net"
+      phase2="auth=PAP"
+    '';
+  };
+}
diff --git a/configs/default.nix b/configs/default.nix
index 27e8b15..b4d502c 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -10,6 +10,7 @@ in
     ./alacritty.nix
     ./bash.nix
     ./bluetooth.nix
+    ./ccc.nix
     ./chromium.nix
     ./cloud.nix
     ./compton.nix
@@ -237,6 +238,7 @@ in
           "WLAN-XVMU6T".pskRaw = "46ea807283255a3d7029233bd79c18837df582666c007c86a8d591f65fae17cc";
           "c-base-public" = {};
           "discord".psk = "baraustrinken";
+          "GoOnline".psk = "airbnbguest";
           "security-by-obscurity".psk = "44629828256481964386";
           "Mayflower".psk = "Fr31EsLan";
         };