From d63a4e6dedf2583615d3d98bf111dab5b8ce110c Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Thu, 28 Dec 2023 16:40:53 +0100
Subject: [PATCH] Add 37c3 networking

---
 nixos/machines/cherry/37c3.nix          | 43 +++++++++++++++++++++++++
 nixos/machines/cherry/configuration.nix |  4 ++-
 2 files changed, 46 insertions(+), 1 deletion(-)
 create mode 100644 nixos/machines/cherry/37c3.nix

diff --git a/nixos/machines/cherry/37c3.nix b/nixos/machines/cherry/37c3.nix
new file mode 100644
index 0000000..c500f3c
--- /dev/null
+++ b/nixos/machines/cherry/37c3.nix
@@ -0,0 +1,43 @@
+{ config, lib, pkgs, ... }:
+let
+    interface = "wlp170s0";
+in
+{
+  networking.networkmanager.ensureProfiles.profiles = {
+    "37C3" = {
+      connection = {
+        id = "37C3";
+        type = "wifi";
+        interface-name = interface;
+      };
+      wifi = {
+        mode = "infrastructure";
+        ssid = "37C3";
+      };
+      wifi-security = {
+        auth-alg = "open";
+        key-mgmt = "wpa-eap";
+      };
+      "802-1x" = {
+        anonymous-identity = "37C3";
+        eap = "ttls;";
+        identity = "37C3";
+        password = "37C3";
+        phase2-auth = "pap";
+        altsubject-matches = "DNS:radius.c3noc.net";
+        ca-cert = "${builtins.fetchurl {
+        url = "https://letsencrypt.org/certs/isrgrootx1.pem";
+        sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
+      }}";
+      };
+      ipv4 = {
+        method = "auto";
+      };
+      ipv6 = {
+        addr-gen-mode = "default";
+        method = "auto";
+      };
+    };
+  };
+
+}
diff --git a/nixos/machines/cherry/configuration.nix b/nixos/machines/cherry/configuration.nix
index 9c7f2d2..f4c2844 100644
--- a/nixos/machines/cherry/configuration.nix
+++ b/nixos/machines/cherry/configuration.nix
@@ -6,7 +6,7 @@
     # last system packages that need to be migrated to components
     ../../system/all/borg-jobs.nix
     #../../system/all/syncthing.nix
-    ../../system/server/netdata.nix
+    #../../system/server/netdata.nix
     ../../modules
 
     ../../components
@@ -22,6 +22,8 @@
     ./qemu.nix
     ./wireguard.nix
 
+    ./37c3.nix
+
   ];