extract secrets for extneder

module-based-network
Daniel Barlow 2023-03-08 20:37:08 +00:00
parent f36d8ef1d0
commit 95e14b5c05
2 changed files with 6 additions and 7 deletions

2
.gitignore vendored
View File

@ -4,4 +4,4 @@ result
result-* result-*
*.qcow2 *.qcow2
_build _build
rotuer-secrets.nix *-secrets.nix

View File

@ -10,7 +10,7 @@
lib, lib,
... ...
}: let }: let
secrets = import ./rotuer-secrets.nix; secrets = import ./extneder-secrets.nix;
inherit inherit
(pkgs.liminix.networking) (pkgs.liminix.networking)
address address
@ -35,7 +35,7 @@ in rec {
imports = [ imports = [
./modules/wlan.nix ./modules/wlan.nix
./modules/tftpboot.nix ./modules/tftpboot.nix
# ./modules/flashable.nix ./modules/flashable.nix
]; ];
kernel = { kernel = {
@ -73,13 +73,11 @@ in rec {
services.hostap = hostapd (config.hardware.networkInterfaces.wlan) { services.hostap = hostapd (config.hardware.networkInterfaces.wlan) {
params = { params = {
ssid = "liminix.dev";
country_code = "GB"; country_code = "GB";
hw_mode = "g"; hw_mode = "g";
channel = "6";
wmm_enabled = 1; wmm_enabled = 1;
ieee80211n = 1; ieee80211n = 1;
inherit (secrets) wpa_passphrase; inherit (secrets) ssid channel wpa_passphrase;
auth_algs = 1; # 1=wpa2, 2=wep, 3=both auth_algs = 1; # 1=wpa2, 2=wep, 3=both
wpa = 2; # 1=wpa, 2=wpa2, 3=both wpa = 2; # 1=wpa, 2=wpa2, 3=both
wpa_key_mgmt = "WPA-PSK"; wpa_key_mgmt = "WPA-PSK";
@ -162,9 +160,10 @@ in rec {
bridge bridge
hostap hostap
defaultroute4 defaultroute4
# resolvconf resolvconf
sshd sshd
]; ];
}; };
users.root.passwd = lib.mkForce secrets.root_password;
defaultProfile.packages = with pkgs; [nftables strace tcpdump swconfig]; defaultProfile.packages = with pkgs; [nftables strace tcpdump swconfig];
} }