get secrets from secrets

flake.nix

@@ -28,6 +28,7 @@
     };
 
     assets.url = "git+https://dario48.site/git/Dario48/NixOs.git?ref=assets";
+    secrets.url = "./secrets";
   };
   outputs =
     {
@@ -189,7 +190,39 @@
               # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
 
               # Enable networking
-              networking.networkmanager.enable = true;
+              networking.networkmanager = {
+                enable = true;
+                ensureProfiles.profiles = {
+                  eduroam = {
+                    connection = {
+                      id = "eduroam";
+                      type = "wifi";
+                      interface-name = "wlo1"; # # replace with your interface-name as displayed by "ip a"
+                    };
+                    wifi = {
+                      mode = "infrastructure";
+                      ssid = "eduroam";
+                    };
+                    wifi-security = {
+                      key-mgmt = "wpa-eap";
+                    };
+                    "802-1x" = {
+                      # # not all or even some additional values may be needed here according to your institution
+                      eap = "PEAP"; # # adapt according to your universities setup
+                      identity = "dario.spinnato@studenti.unimi.it";
+                      client-cert = "/etc/ssl/certs/eduroam/cert.pem";
+                      private-key-password = inputs.secrets.private-key-password;
+                      ca-cert = "/etc/ssl/certs/certs.pem";
+                    };
+                    ipv4 = {
+                      method = "auto";
+                    };
+                    ipv6 = {
+                      method = "auto";
+                    };
+                  };
+                };
+              };
 
               # Set your time zone.
               time.timeZone = "Europe/Rome";