feat(dgnum): wifi profile

machines/kat-probook/configuration.nix

@@ -50,8 +50,52 @@ in
         "enp2s0"
         "wg0"
       ];
+      ensureProfiles = {
+        profiles = {
+          "DGNum" = {
+            connection = {
+              id = "DGNum";
+              type = "wifi";
             };
-    firewall.allowedUDPPorts = [ 67 53 ];
+            wifi = {
+              mode = "infrastructure";
+              ssid = "DGNum";
+            };
+            wifi-security = {
+              key-mgmt = "wpa-eap";
+            };
+            "802-1x" = {
+              anonymous-identity = "anonymous";
+              eap = "peap";
+              identity = "lbailly";
+              password = "38C3";
+              phase2-auth = "mschapv2";
+              domain-match = "radius.dgnum.eu";
+              ca-cert = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
+            };
+            ipv4 = {
+              method = "auto";
+            };
+            ipv6 = {
+              addr-gen-mode = "default";
+              method = "auto";
+            };
+          };
+        };
+        secrets.entries = [
+          {
+            matchId = "DGNum";
+            matchType = "wifi";
+            key = "802-1x.password";
+            file = "/root/dgnum_passwd";
+          }
+        ];
+      };
+    };
+    firewall.allowedUDPPorts = [
+      67
+      53
+    ];
   };
   # systemd.tmpfiles.rules = [
   #   "w /sys/devices/system/cpu/cpufreq/policy*/scaling_governor - - - - performance"