From ae707d33ea89d9ff84e99c770bf9e03c452b723b Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Thu, 28 May 2026 18:55:41 +1000
Subject: [PATCH] alyssum/networking: use wpa_conf

---
 hosts/alyssum/default.nix    |   2 +-
 hosts/alyssum/networking.nix |  15 +++++++++++++--
 secrets.nix                  |   3 ++-
 secrets/wpa_conf.age         | Bin 420 -> 538 bytes
 4 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/hosts/alyssum/default.nix b/hosts/alyssum/default.nix
index e5165d8..e6a7e58 100644
--- a/hosts/alyssum/default.nix
+++ b/hosts/alyssum/default.nix
@@ -4,7 +4,7 @@
   time.timeZone = "Australia/Melbourne";
 
   age.secrets = {
-    # acme_dns.file = ../../secrets/acme_dns.age;
+    wpa_conf.file = ../../secrets/wpa_conf.age;
   };
 
   imports = with modules.system; [
diff --git a/hosts/alyssum/networking.nix b/hosts/alyssum/networking.nix
index ee27faf..9d1fdf9 100644
--- a/hosts/alyssum/networking.nix
+++ b/hosts/alyssum/networking.nix
@@ -1,3 +1,14 @@
-{ ... }: {
-  networking.useDHCP = true;
+{ config, ... }: {
+  environment.etc."wpa_supplicant.conf".source = config.age.secrets.wpa_conf.path;
+  networking = {
+    useDHCP = true;
+    interfaces.wlp1s0.useDHCP = false;
+    interfaces.wlp1s0.ipv4.addresses = [{
+      address = "192.168.1.167";
+      prefixLength = 24;
+    }];
+
+    defaultGateway = "192.168.1.1";
+    nameservers = [ "8.8.8.8" "8.8.4.4" ];
+  };
 }
diff --git a/secrets.nix b/secrets.nix
index b2d0d0e..b4d5b2c 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -1,4 +1,5 @@
 let
+  alyssum = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAp00i2DTwMk9i2WBEwpNTDA51TQJEqzpyCka6znmRzR";
   anemone = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEPFifSAybe97xDP/cq6AAjy7Fm0go0dtQ9ICK6JRUgc";
   blossom = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA5wfPCcpkNR3ubr7cBV0UwVCDo/sMmV0aI/JOJTIxQj";
   dandelion = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUk99ku7+eiIO7Q9sIPlPx3GiUljLv7W404W/zwrtzI";
@@ -7,7 +8,7 @@ let
   rin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPru5eTBvHJ4ZmrrzPRHCGM09wQP/ZHSaKYalDuBVO15";
 in {
   "secrets/passwd.age".publicKeys = [ anemone blossom rin ];
-  "secrets/wpa_conf.age".publicKeys = [ blossom rin ];
+  "secrets/wpa_conf.age".publicKeys = [ alyssum blossom rin ];
 
   "secrets/acme_dns.age".publicKeys = [ dandelion hazel rin ];
   "secrets/navidrome_env.age".publicKeys = [ anemone dandelion rin ];
diff --git a/secrets/wpa_conf.age b/secrets/wpa_conf.age
index 2b6862e53af790780d4fcfd88e1ef7ed6cc3f47c..555b5946deead8ef44060e3b0217f4b9c009db03 100644
GIT binary patch
delta 511
zcmZ3&Jd0(5YJIl9Z*V}lLU>kqWLQdoqiLSArJ=WZXh^1MPH|FhPFA{MUYNJDdv=9k
zMM-#gZjiAfS5#qnQD~xBsIRwgv3XcPK#q@jpm}a;Sy-?|fOnF<vr}$BR*7Yfc5#U-
zm#&>cadC!jYKoDmsiCEUbEtDxM4*D1UwA>GiAQ*Gc72JnzlB+dzeQkKfTN*tdZ}q(
zSiYIBONK>(pL?WdNuCLpk5gfKjzOVmn47+liJ6mMvZ1zbfk~csdVyO?agwi@lfH+3
zijPsMaSn!cp_XnDIq3?O;a(XYfdNHDuKNCEVZk9@l>zx>sh0YwmCp4p{`pm|PN5mW
z0R^ruWx>T<A)clsDJ6M9d43sTsb=LFeqp(#fsXni$^NEcIib$wA^ru4rTM;vB|+s}
zy1KdwZq5<q73CGi-X6Y%ftkq`W!YX~$rV9`Wucy##Zf^e`C*PGIYIfB+7|g--;=F1
zi!Cc;HbjW*4RC+WB4<`%S1PuDa_`JZM;toV%Nl<Dmmj0>=8f)qn~#$p87h3xd9;4T
zrnNzf|IH582;94@ckd31{D*rc>}FlY*0ss2()?AL_cFU#&y-iXG0H#w8hSt>c-vQ<
r#Rt}$ay)eO7W2ddY>%%5GB4jyThSI~5IDjA-Mz;4Xw~%s_N8(Fb<Mop

delta 373
zcmbQmvV?hpYMgVZb5=y4LZn$ivPXVkZlqgoesP$Yu}h?DVtHh~TU36&dzM*px@&-k
zUs;}cRE~QwmtlriWoe~Piiw*^Vx*-<MwOvONMV?Jsb5}brbk|}iE)WpPHA4gS5bEQ
z#E;_j`5E33>4s7MZYAkvWtmYSIc3@Dsd-L`j+w=-K9M<DNv^qxNyTZ-E{@4uZtekr
z*`}4*rj8ztUJ>aAQ9((0zLlZ*`auy<x!(GvmA;8S;m(;xS!u3Zy1Kdw0U^eP#vwsj
zu0AGNfdTH0j+xGm<pD-Tp*ilMKKX?KmWGw}`2hir+MX`OT&D$|b*z~^&zgs|Cns4+
zTKVeATa_Qrsvo*_?w3#Xhd<r7UhLX1e|MKj<*8tQE89KG)DL^7$Ot(pyZAV;{^xx2
z`{KTvJ(Ffy2_)Rnh$zsVu90PJlkr;G=(EcC@4H)`>(p|KKD_DpibKDc<JYGLz3&|i
X(ipy^F5t=EW3l6pwM%>GPtOnl|3s2Z