patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

fix: hostapd works again

Browse source
This commit is contained in:
Patrick 2025-01-11 19:00:41 +01:00
parent c6e3d087ab
commit 639f63af9b
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
1 changed files with 21 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
hosts/nucnix/hostapd.nix
View file

@ -22,6 +22,9 @@
generator.script = "alnum"; generator.script = "alnum";
}; };
}; };
# Hostapd tries to delete any bridges it uses when restarting
# If any other service dares also using the bridges, thats too bad
# Have fun resetting your server because they're not coming back
systemd.services.hostapd.stopIfChanged = false; systemd.services.hostapd.stopIfChanged = false;
systemd.services.hostapd.restartIfChanged = false; systemd.services.hostapd.restartIfChanged = false;
systemd.services.hostapd.reloadTriggers = lib.mkForce [ ]; systemd.services.hostapd.reloadTriggers = lib.mkForce [ ];
@ -64,25 +67,29 @@
apIsolate = true; apIsolate = true;
# not supporte by laptop :( # not supporte by laptop :(
# settings.ieee80211w = 0; # settings.ieee80211w = 0;
settings.vlan_file = "${pkgs.writeText "hostaps.vlans" '' settings = {
10 wifi-home br-home # vlan_file = "${pkgs.writeText "hostaps.vlans" ''
40 wifi-iot br-iot # 10 wifi-home br-home
50 wifi-guests br-guests # 40 wifi-iot br-iot
''}"; # 50 wifi-guests br-guests
# ''}";
# rsn_preauth_interfaces = "br-home br-iot br-guests";
bridge = "br-home";
};
authentication = { authentication = {
saePasswords = [ saePasswords = [
{ {
passwordFile = config.age.secrets.homeWlan.path; passwordFile = config.age.secrets.homeWlan.path;
vlanid = 10; # vlanid = 10;
}
{
passwordFile = config.age.secrets.iotWlan.path;
vlanid = 40;
}
{
passwordFile = config.age.secrets.guestWlan.path;
vlanid = 50;
} }
# {
# passwordFile = config.age.secrets.iotWlan.path;
# vlanid = 40;
# }
# {
# passwordFile = config.age.secrets.guestWlan.path;
# vlanid = 50;
# }
]; ];
pairwiseCiphers = [ pairwiseCiphers = [
"CCMP" "CCMP"