aboutsummaryrefslogtreecommitdiffstats
path: root/modules/nixos/sils/networking.nix
blob: 4f55f499b329becca09b11be872302f39932f273 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
{
  config,
  pkgs,
  lib,
  ...
}: let
  cfg = config.sils.networking;
in {
  options.sils.networking.enable = lib.mkEnableOption "networking";
  config = lib.mkIf cfg.enable {
    networking = {
      enableIPv6 = false;
      #useDHCP = true;
      networkmanager = {
        enable = true;
        plugins = with pkgs; [
          networkmanager-openvpn
        ];
      };
      #nameservers = ["2620:fe::fe" "2620:fe::9" "9.9.9.9" "149.112.112.112"];
      #wireless = {
      #  enable = false; # TODO: Reenable
      #  environmentFile = config.age.secrets.wireless.path;
      #  networks = {
      #    # Important: Never forget the second '@'!
      #    "@SSID_N0@".psk = "@PSK_N0@";
      #    "@SSID_N1@".psk = "@PSK_N1@";
      #    "@SSID_N2@" = {
      #      hidden = true;
      #      psk = "@PSK_N2@";
      #    };
      #    "@SSID_N3@".psk = "@PSK_N3@";
      #    "@SSID_N4@" = {
      #      auth = ''
      #        proto=RSN
      #        key_mgmt=WPA-EAP
      #        pairwise=CCMP
      #        auth_alg=OPEN
      #        eap=PEAP
      #        identity="@IDENTITY_N4@"
      #        password="@PSK_N4@"
      #        ca_cert="${self}/files/DNSX-CA.pem"
      #      '';
      #    };
      #    "@SSID_N5@".psk = "@PSK_N5@";
      #    "GPN-Open".auth = ''
      #      key_mgmt=OWE
      #    '';
      #  };
      #  userControlled = {
      #    enable = true;
      #    group = "wheel"; # TODO: Change this?
      #  };
      #};
    };
  };
}