GPN

machines/kat-probook/configuration.nix

@@ -29,6 +29,7 @@
   };
 
   nixpkgs.config.allowUnfree = true;
+
   hardware = {
     pulseaudio = {
       enable = true;
@@ -91,4 +92,40 @@
   # virtualisation.libvirtd.enable = true;
 
   system.stateVersion = "23.11";
+
+  networking.networkmanager.ensureProfiles.profiles = {
+    "GPN" = {
+      connection = {
+        id = "GPN";
+        type = "wifi";
+        autoconnect = true;
+        interface-name = "wlp0s20f3";
+      };
+      wifi = {
+        mode = "infrastructure";
+        ssid = "GPN";
+      };
+      wifi-security = {
+        key-mgmt = "wpa-eap";
+      };
+      "802-1x" = {
+        eap = "ttls;";
+        identity = "gpn";
+        password = "gpn";
+        phase2-auth = "pap";
+        domain-suffix-match = "radius.noc.gulas.ch";
+        ca-cert = "${builtins.fetchurl {
+          url = "https://letsencrypt.org/certs/isrgrootx1.pem";
+          sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
+          }}";
+      };
+      ipv4 = {
+        method = "auto";
+      };
+      ipv6 = {
+        addr-gen-mode = "stable-privacy";
+        method = "auto";
+      };
+    };
+  };
 }