From 167541a6e33245dbc664092698c1b01529425460 Mon Sep 17 00:00:00 2001
From: "quentin@aristote.fr" <quentin@aristote.fr>
Date: Sun, 27 Oct 2024 20:04:31 +0100
Subject: hostapd: iot: enable wpa3-sae-transition

---
 config/networking/services/ap.nix | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

(limited to 'config/networking/services/ap.nix')

diff --git a/config/networking/services/ap.nix b/config/networking/services/ap.nix
index 2248f5d..5771821 100644
--- a/config/networking/services/ap.nix
+++ b/config/networking/services/ap.nix
@@ -19,7 +19,7 @@
     iface = radio + lib.optionalString (bridge != "wan") "-${bridge}";
   in {
     "${iface}" = {
-      ssid = ssids."${bridge}" + lib.optionalString (radio == "wlp5s0" && bridge != "guest") " (n)";
+      ssid = ssids."${bridge}" + lib.optionalString (radio == "wlp5s0" && bridge != "guest") " (2.4GHz)";
       bssid = ifaces."${iface}".machines.self.mac;
 
       authentication.mode = "wpa3-sae";
@@ -104,7 +104,16 @@ in {
         networks = let
           perBridgeAC = perBridgeCfg "wlp1s0";
         in
-          (perBridgeAC "wan") // (perBridgeAC "iot");
+          lib.mkMerge [
+            (perBridgeAC "wan")
+            (perBridgeAC "iot")
+            {
+              wlp1s0-iot.authentication = {
+                mode = lib.mkForce "wpa3-sae-transition";
+                wpaPskFile = "/etc/hostapd/iot.psk";
+              };
+            }
+          ];
       };
       wlp5s0 = {
         inherit countryCode driver settings;
@@ -120,7 +129,6 @@ in {
           perBridgeN = perBridgeCfg "wlp5s0";
         in
           (perBridgeN "wan")
-          // (perBridgeN "iot")
           // (perBridgeN "guest");
       };
     };
-- 
cgit v1.2.3