add eduroam stuff

This commit is contained in:
Dario48 2026-04-14 14:52:57 +02:00
commit e99b236818
2 changed files with 21 additions and 3 deletions

12
flake.lock generated
View file

@ -166,9 +166,21 @@
"neovim-dotfiles": "neovim-dotfiles", "neovim-dotfiles": "neovim-dotfiles",
"nixpkgs": "nixpkgs", "nixpkgs": "nixpkgs",
"plasma-manager": "plasma-manager", "plasma-manager": "plasma-manager",
"secrets": "secrets",
"zen-browser": "zen-browser" "zen-browser": "zen-browser"
} }
}, },
"secrets": {
"locked": {
"path": "./secrets",
"type": "path"
},
"original": {
"path": "./secrets",
"type": "path"
},
"parent": []
},
"systems": { "systems": {
"locked": { "locked": {
"lastModified": 1681028828, "lastModified": 1681028828,

View file

@ -204,15 +204,21 @@
ssid = "eduroam"; ssid = "eduroam";
}; };
wifi-security = { wifi-security = {
group = "ccmp";
pairwise = "ccmp";
proto = "rsn";
key-mgmt = "wpa-eap"; key-mgmt = "wpa-eap";
}; };
"802-1x" = { "802-1x" = {
altsubject_match = "DNS:eduroam.unimi.it";
# # not all or even some additional values may be needed here according to your institution # # not all or even some additional values may be needed here according to your institution
eap = "PEAP"; # # adapt according to your universities setup eap = "PEAP"; # # adapt according to your universities setup
identity = "dario.spinnato@studenti.unimi.it"; anonimous-identity = inputs.secrets.eduroam.username;
client-cert = "/etc/ssl/certs/eduroam/cert.pem"; identity = inputs.secrets.eduroam.username;
private-key-password = inputs.secrets.private-key-password; password = inputs.secrets.eduroam.password;
phase2-auth = "mschapv2";
ca-cert = "/etc/ssl/certs/certs.pem"; ca-cert = "/etc/ssl/certs/certs.pem";
ca-path = "/etc/ssl/certs/certs.pem";
}; };
ipv4 = { ipv4 = {
method = "auto"; method = "auto";