Wi-Fi now has passwords automatically configured

machines/luna/modules.nix

@@ -9,6 +9,7 @@
     base = {
       nix.enable = true;
       locale.enable = true;
+      secrets.enable = true;
     };
 
     boot = {

machines/solis/modules.nix

@@ -9,6 +9,7 @@
     base = {
       nix.enable = true;
       locale.enable = true;
+      secrets.enable = true;
     };
 
     boot = {

machines/terra/modules.nix

@@ -9,6 +9,7 @@
     base = {
       nix.enable = true;
       locale.enable = true;
+      secrets.enable = true;
     };
 
     boot = {

modules/hardware/wifi.nix

@@ -13,7 +13,30 @@ in {
   };
 
   config = mkIf cfg.enable {
-    networking.networkmanager.enable = true;
+    networking.wireless = {
-    users.users.horseman.extraGroups = ["networkmanager"];
+      enable = true;
+      userControlled.enable = true;
+
+      secretsFile = toString config.age.secrets.wifi.path;
+
+      networks = {
+        "Wi-Fi de Ruiters" = {
+          pskRaw = "ext:psk_wifideruiter";
+        };
+
+        "kargadoor" = {
+          pskRaw = "ext:psk_kargadoor";
+        };
+
+        "eduroam" = {
+          auth = ''
+            key_mgmt=WPA-EAP
+            eap=PWD
+            identity="ext:identity_eduroam"
+            password="ext:psk_eduroam"
+          '';
+        };
+      };
+    };
   };
 }

modules/network/syncthing.nix

@@ -16,6 +16,7 @@ in {
     services.syncthing = {
       enable = true;
       user = "horseman";
+      group = "users";
       dataDir = "/home/horseman";
       configDir = "/home/horseman/.config/syncthing";
       overrideDevices = true;