From 639f63af9bf50f0b5d1350c1d0baf5dce0930a6a Mon Sep 17 00:00:00 2001
From: Patrick <patrick@failmail.dev>
Date: Sat, 11 Jan 2025 19:00:41 +0100
Subject: [PATCH] fix: hostapd works again

---
 hosts/nucnix/hostapd.nix | 35 +++++++++++++++++++++--------------
 1 file changed, 21 insertions(+), 14 deletions(-)

diff --git a/hosts/nucnix/hostapd.nix b/hosts/nucnix/hostapd.nix
index 942291d..f5ba259 100644
--- a/hosts/nucnix/hostapd.nix
+++ b/hosts/nucnix/hostapd.nix
@@ -22,6 +22,9 @@
       generator.script = "alnum";
     };
   };
+  # Hostapd tries to delete any bridges it uses when restarting
+  # If any other service dares also using the bridges, thats too bad
+  # Have fun resetting your server because they're not coming back
   systemd.services.hostapd.stopIfChanged = false;
   systemd.services.hostapd.restartIfChanged = false;
   systemd.services.hostapd.reloadTriggers = lib.mkForce [ ];
@@ -64,25 +67,29 @@
         apIsolate = true;
         # not supporte by laptop :(
         # settings.ieee80211w = 0;
-        settings.vlan_file = "${pkgs.writeText "hostaps.vlans" ''
-          10 wifi-home br-home
-          40 wifi-iot br-iot
-          50 wifi-guests br-guests
-        ''}";
+        settings = {
+          #   vlan_file = "${pkgs.writeText "hostaps.vlans" ''
+          #     10 wifi-home br-home
+          #     40 wifi-iot br-iot
+          #     50 wifi-guests br-guests
+          #   ''}";
+          #   rsn_preauth_interfaces = "br-home br-iot br-guests";
+          bridge = "br-home";
+        };
         authentication = {
           saePasswords = [
             {
               passwordFile = config.age.secrets.homeWlan.path;
-              vlanid = 10;
-            }
-            {
-              passwordFile = config.age.secrets.iotWlan.path;
-              vlanid = 40;
-            }
-            {
-              passwordFile = config.age.secrets.guestWlan.path;
-              vlanid = 50;
+              # vlanid = 10;
             }
+            # {
+            #   passwordFile = config.age.secrets.iotWlan.path;
+            #   vlanid = 40;
+            # }
+            # {
+            #   passwordFile = config.age.secrets.guestWlan.path;
+            #   vlanid = 50;
+            # }
           ];
           pairwiseCiphers = [
             "CCMP"