kfm/niveum
1
0
Fork 0
mirror of https://github.com/kmein/niveum synced 2026-03-16 10:11:08 +01:00
Code Releases Activity

wifis

Browse Source
This commit is contained in:
Kierán Meinhardt
2019-05-14 07:18:04 +02:00
parent 1ddba523c9
commit edf32ed979
3 changed files with 47 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
configs/hu-berlin.nix
View File

@@ -1,36 +1,36 @@
{ pkgs, ... }:
let
eduroam = (import <dot/secrets.nix>).eduroam;
eduroamConfig = {
auth = ''
key_mgmt=WPA-EAP
eap=TTLS
proto=RSN
identity="${eduroam.identity}"
anonymous_identity="anonymous@wlan.hu-berlin.de"
altsubject_match="DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de"
password="${eduroam.password}"
ca_cert="${pkgs.fetchurl {
url = https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem;
sha256 = "b30989fd9e45c74bf417df74d1da639d1f04d4fd0900be813a2d6a031a56c845";
}}"
phase2="auth=PAP"
'';
};
eduroamAuth = ''
key_mgmt=WPA-EAP
eap=TTLS
proto=RSN
identity="${eduroam.identity}"
anonymous_identity="anonymous@wlan.hu-berlin.de"
altsubject_match="DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de"
password="${eduroam.password}"
ca_cert="${pkgs.fetchurl {
url = https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem;
sha256 = "b30989fd9e45c74bf417df74d1da639d1f04d4fd0900be813a2d6a031a56c845";
}}"
phase2="auth=PAP"
'';
in {
networking.wireless.networks = {
eduroam_5GHz = eduroamConfig;
eduroam = eduroamConfig;
eduroam_5GHz.auth = eduroamAuth;
eduroam.auth = eduroamAuth;
};
services.openvpn.servers = {
hu-berlin = {
config = ''config ${pkgs.fetchurl {
config = ''
config ${pkgs.fetchurl {
url = https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn;
sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
}}
# route-nopull
# route 141.20.0.0 255.255.0.0'';
# route 141.20.0.0 255.255.0.0
'';
authUserPass = {
username = eduroam.identity;
password = eduroam.password;