115 lines
3.2 KiB
Nix
115 lines
3.2 KiB
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}:
|
|
|
|
let
|
|
cfg = config.clan.iwd;
|
|
secret_path = ssid: config.clan.core.vars.generators."iwd.${ssid}".files."iwd.${ssid}".path;
|
|
secret_generator = name: value: {
|
|
name = "iwd.${value.ssid}";
|
|
value =
|
|
let
|
|
secret_name = "iwd.${value.ssid}";
|
|
in
|
|
{
|
|
prompts.${secret_name} = {
|
|
description = "Wifi password for '${value.ssid}'";
|
|
persist = true;
|
|
};
|
|
migrateFact = secret_name;
|
|
# ref. man iwd.network
|
|
script = ''
|
|
config="
|
|
[Settings]
|
|
AutoConnect=${if value.AutoConnect then "true" else "false"}
|
|
[Security]
|
|
Passphrase=$(echo -e "$prompt_value/${secret_name}" | ${lib.getExe pkgs.gnused} "s=\\\=\\\\\\\=g;s=\t=\\\t=g;s=\r=\\\r=g;s=^ =\\\s=")
|
|
"
|
|
echo "$config" > "$out/${secret_name}"
|
|
'';
|
|
};
|
|
};
|
|
in
|
|
{
|
|
options.clan.iwd = {
|
|
networks = lib.mkOption {
|
|
type = lib.types.attrsOf (
|
|
lib.types.submodule (
|
|
{ name, ... }:
|
|
{
|
|
options = {
|
|
ssid = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = name;
|
|
description = "The name of the wifi network";
|
|
};
|
|
AutoConnect = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = true;
|
|
description = "Automatically try to join this wifi network";
|
|
};
|
|
};
|
|
}
|
|
)
|
|
);
|
|
default = { };
|
|
description = "Wifi networks to predefine";
|
|
};
|
|
};
|
|
|
|
imports = [
|
|
(lib.mkRemovedOptionModule [
|
|
"clan"
|
|
"iwd"
|
|
"enable"
|
|
] "Just define clan.iwd.networks to enable it")
|
|
];
|
|
|
|
config = lib.mkMerge [
|
|
(lib.mkIf (cfg.networks != { }) {
|
|
# Systemd tmpfiles rule to create /var/lib/iwd/example.psk file
|
|
systemd.tmpfiles.rules = lib.mapAttrsToList (
|
|
_: value: "C /var/lib/iwd/${value.ssid}.psk 0600 root root - ${secret_path value.ssid}"
|
|
) cfg.networks;
|
|
|
|
clan.core.vars.generators = lib.mapAttrs' secret_generator cfg.networks;
|
|
|
|
# TODO: restart the iwd.service if something changes
|
|
})
|
|
{
|
|
warnings = [
|
|
''
|
|
The clan module `iwd` is deprecated and replaced by the clan service `wifi`
|
|
Please migrate your config to the new service (see: https://docs.clan.lol/reference/clanServices/wifi/)
|
|
|
|
To keep passwords after migrating the config, use:
|
|
clan vars get <your-machine> iwd.<network-name>/ssid | clan vars set <your-machine> wifi.<network-name>/network-name
|
|
and:
|
|
clan vars get <your-machine> iwd.<network-name>/password | clan vars set <your-machine> wifi.<network-name>/password
|
|
''
|
|
];
|
|
|
|
# disable wpa supplicant
|
|
networking.wireless.enable = false;
|
|
|
|
# Set the network manager backend to iwd
|
|
networking.networkmanager.wifi.backend = "iwd";
|
|
|
|
# Use iwd instead of wpa_supplicant. It has a user friendly CLI
|
|
networking.wireless.iwd = {
|
|
enable = true;
|
|
settings = {
|
|
Network = {
|
|
EnableIPv6 = true;
|
|
RoutePriorityOffset = 300;
|
|
};
|
|
Settings.AutoConnect = true;
|
|
};
|
|
};
|
|
}
|
|
];
|
|
}
|