diff options
| -rw-r--r-- | machines/serpentine/default.nix | 1 | ||||
| -rw-r--r-- | machines/wolfram/default.nix | 2 | ||||
| -rw-r--r-- | modules/wireless.nix | 25 | ||||
| -rw-r--r-- | secrets/secrets.nix | 6 | ||||
| -rw-r--r-- | secrets/wireless-secrets.age | 17 |
5 files changed, 51 insertions, 0 deletions
diff --git a/machines/serpentine/default.nix b/machines/serpentine/default.nix index 66d6a1f..f1e5c4b 100644 --- a/machines/serpentine/default.nix +++ b/machines/serpentine/default.nix @@ -3,6 +3,7 @@ { imports = [ ../../modules/work + ../../modules/wireless.nix ./hardware.nix ./devices.nix diff --git a/machines/wolfram/default.nix b/machines/wolfram/default.nix index fc99002..89d840d 100644 --- a/machines/wolfram/default.nix +++ b/machines/wolfram/default.nix @@ -2,6 +2,8 @@ { imports = [ + ../../modules/wireless.nix + ./hardware.nix ./devices.nix ]; diff --git a/modules/wireless.nix b/modules/wireless.nix new file mode 100644 index 0000000..89d8b65 --- /dev/null +++ b/modules/wireless.nix @@ -0,0 +1,25 @@ +{ config, lib, ... }: + +{ + age.secrets.wireless-secrets = { + file = ../secrets/wireless-secrets.age; + }; + + networking = { + useDHCP = true; + + wireless = { + enable = true; + + # force wpa_supplicant to use all wlan interfaces + interfaces = lib.mkForce [ ]; + + secretsFile = config.age.secrets.wireless-secrets.path; + networks = { + # yea this is my home network :3 + # (my boyfriends brother picked the name) + "Das asoziale Netzwerk".pskRaw = "ext:psk_home"; + }; + }; + }; +} diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 2b4f75a..9f1963c 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -7,11 +7,17 @@ let graphite moissanite serpentine + wolfram ; in { "password.age".publicKeys = allSystems ++ allUsers; + "wireless-secrets.age".publicKeys = [ + serpentine + wolfram + ] ++ allUsers; + "wg_hexa.conf.age".publicKeys = [ moissanite serpentine diff --git a/secrets/wireless-secrets.age b/secrets/wireless-secrets.age new file mode 100644 index 0000000..c338f02 --- /dev/null +++ b/secrets/wireless-secrets.age @@ -0,0 +1,17 @@ +age-encryption.org/v1 +-> ssh-ed25519 sVr5NA TIJnb3NvPR++1OzpmwZZZuhJDZRIYybIg0WX1KtuKAE +GvFnarchn8h6DsHzVwKPbvpPn8c40RMmcQDuDUfnm+k +-> ssh-ed25519 3Bx4sA 92OzLSTPf3H2kgy4v0Nxfh2V4gX1GMv5y7y36TQGtWE +ziCWZTG6GsyF6QUKVvvzaA7Or/GJorOfAmuseXH1s6o +-> ssh-ed25519 Ke+vKw PAKxmxyMFMwOIhKTKV1PGrbv2jCzdyDf1p+K9CqZfgw +61sMwCu5t6Yz4JNvyoAaqIBZsC/hD9l9+rqGlRB+D4E +-> ssh-ed25519 bykYHg 7Te5/RXnjRLV6mRAfJWXW/BOzJUVPEtTP+b+wztUhTw +Hl+p3y93mWojlsS64Tgxeq4wPM6VAlXB2PT08PfInYE +-> ssh-ed25519 mE4Xjg L7stmisTcQT5cxGBZcLuqGRTTq3p/IJf5mc1/K2sXAM +9InKsxk0tlMBLyOnDn6ZPSe1V+yLpIFB9szFd9PloYo +-> ssh-ed25519 4vACdg usW4nPyO6m2XOGW8sB3J7wvTM+woT/nZpks54ERZ9UI +teUfSO1kjdOjkYB0/LdGlpl+LDuvFNoXvW8tK05pLvI +-> ssh-ed25519 nsdjwQ 9bWwyvXcdHLzCkwjR0MgeTF9i4Edyoh2CVDO8hiM7zI +sa/clUvLqEVuaFzrL11IdgD+nPBZSlKJ1j3Nk9c/7xU +--- 9qTkcUksYhk+wkqJ5XUUunhm9/g2kTPgRB5p5XGiHX8 +!rN%ؑ z LN(HFlrhisڑp3UPUZ8 \ No newline at end of file |