diff --git a/common/networking/networkmanager.nix b/common/networking/networkmanager.nix
index cf0a649..a9196e8 100644
--- a/common/networking/networkmanager.nix
+++ b/common/networking/networkmanager.nix
@@ -9,6 +9,7 @@
   networking = {
     networkmanager = {
       enable = true;
+      wifi.scanRandMacAddress = true;
       ensureProfiles = {
         environmentFiles = [ config.sops.secrets."wireless.env".path ];
         profiles = {
@@ -21,6 +22,29 @@
               key-mgmt = "wpa-psk";
               psk = "$home_psk";
             };
+            connection.autoconnect-priority = 100;
+          };
+          eduroam = {
+            connection.id = "eduroam";
+            connection.type = "wifi";
+            wifi.ssid = "eduroam";
+            wifi-security = {
+              auth-alg = "open";
+              key-mgmt = "wpa-eap";
+              eap = "peap";
+              identity = "$eduroam_identity";
+              password = "$school_password";
+              phase2 = "mschapv2";
+            };
+            connection.autoconnect = true;
+            connection.autoconnect-priority = 90;
+            wifi.powersave = 2;
+            ipv4.dns = "8.8.8.8,8.8.4.4.";
+            ipv6.dns = "2001:4860:4860::8888";
+            wifi.mac-address-randomization = "random";
+            ipv4.dhcp-send-hostname = false;
+            ipv4.dhcp-hostname = "NoName";
+            # connection.metered = "yes";
           };
         };
       };
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 3e3f56f..f0e3195 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -1,7 +1,5 @@
 restic_key: ENC[AES256_GCM,data:DzpWvFP5gyhrnLVIYgu9ouotWqkOAHehihSKf/TqJE+sHTD4vnIScfhzoKzdkoDoWfkcmQ==,iv:q83qNYuP/3mngvg+kUfOVToogL8VTvZ6HiGIztpnP/s=,tag:YNWwbma0HmPKqYCS1L5kQQ==,type:str]
 wireless.env: ENC[AES256_GCM,data:/5i0Kv+VFTtVpaD7tfO2ahePu20eYkUYAqoh39PA2aoMWywLddQEQy4arj2Nvcw8hsRk760Kiq4wz3c23dPDqy7rU980NF2RaP4ODMIiQISfYeQP9coD84JhlnSTW+7EkhV520naqJgIYY0IsA8OxR/5euyFMHOL75FKnBh1ILY2DPSsJNG2m2ldw+US7E+7r4REl8tDqKfCIL5tznmbVTbPrer7cwrXe+ScFaholmqSntaB06yIIO3yr88TmE6EXF6oLCXU,iv:DPOqx7M7E83+DYjGFPZy44cxrta/3953IDjXL40rLAc=,tag:KmYBpQKgshMSgxnC96T1bQ==,type:str]
-wpa_supplicant-conf: ENC[AES256_GCM,data:TS07YI86+5ZarnYe+0hNZbCI5OoUanZ5kVTfPHVThe+WBHwMLzJhF662ww8zVmHl27CDIvehPfChpUsFMYZUcu47MS8ysJbqZwUm,iv:drQr17arqRIpVzAXYFiHSlKgxjUR4YSYTgu+4Xfpw3Y=,tag:I39eIopvd1WS0L6m2tGBKQ==,type:str]
-syncthing_grymforge: ENC[AES256_GCM,data:aOb6/slBdrgibEkkGjsm6lDBt+qMp6RWVS9IawEDTelnou/nO1osLZFI1rbCUrL9kLVfx4EuoKSp9SW3im+o,iv:W+kdDTz07AxWIqR/DK0b1hm7y3YNlsxvTmBWE6cqWCA=,tag:D8Wf8v93vfsONJtpnSowSQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -17,8 +15,8 @@ sops:
             US9oa0pORXRVWWlyYlZZTGhXdTdOaWsKClqIK/YNJIIGFqOO0t4oni8dRTTXQniG
             ioIwAOdEgE/n0vcYhHXxLxWlTeqGZF076g7EFfIqiSNqrDtacRnazg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-15T20:28:32Z"
-    mac: ENC[AES256_GCM,data:myXEifSHlWh16ZFeWoxCW8XfuxSQka6vLIV8oiyHPXLrgffQseMOgBkXb5e1VPbBqaCx5xjWR3yCgD0Zgl30LKbfyfC8vCLl9/z41nz0MHt6KcKuxF75FG9gkxOMYIapy0IGq/MUiUImMd7KxLEAmLJeGtE3NTBT2h/TupeCd1w=,iv:8OGKy3lBujPt1zMuX41TGYxcYv62Q6hOEjK020Tx9TA=,tag:fgLW4XW4eXiDexYlgCDtPw==,type:str]
+    lastmodified: "2025-02-16T03:03:41Z"
+    mac: ENC[AES256_GCM,data:ni4W1SkocmHwVSzkoUj3vFBZKWhF4ImPOIzLxvpLiG8Cwz8YvSca0Ca1T30zjyS1RS7IrkTB+2RmpTs4isJc9lcTf30PJq1bgm9mGt5FXmGoNz6L0cJtWPLktGj1MTkMX/DylaBOnqTYdAWW9Ix072jtCLiECwkjeiHMHvFdJmQ=,iv:m0yrwnN6wcD+EAQvGgQVoWEcXfiKK0JhBpCXutiZN98=,tag:BLytc4Zr9elxVS/YlExcxg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.2