wip

common/networking/default.nix

@@ -1,11 +1,13 @@
-{lib, ...}: {
+{ lib, ... }:
+{
   imports = [
     ./zerotier.nix
     ./firewall.nix
-    ./wireless.nix
+    # ./wireless.nix
+    ./networkmanager.nix
   ];
 
   zerotier.enable = lib.mkDefault true;
   firewall.enable = lib.mkDefault true;
-  wireless.enable = lib.mkDefault false;
+  # wireless.enable = lib.mkDefault false;
 }

common/networking/networkmanager.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+{
+
+  sops.secrets."wireless.env" = { };
+  networking = {
+    networkmanager = {
+      enable = true;
+      ensureProfiles = {
+        environmentFiles = [ config.sops.secrets."wireless.env".path ];
+        profiles = {
+          home-wifi = {
+            connection.id = "home-wifi";
+            connection.type = "wifi";
+            wifi.ssid = "$home_uuid";
+            wifi-security = {
+              auth-alg = "open";
+              key-mgmt = "wpa-psk";
+              psk = "$home_psk";
+            };
+          };
+        };
+      };
+    };
+  };
+}