nixcfg/nixosModules/system/wifi.nix

{
  config,
  inputs,
  lib,
  pkgs,
  ...
}: {
  age.secrets.wifi.file = ../../secrets/wifi.age;

  networking.networkmanager = {
    ensureProfiles = {
      environmentFiles = [
        config.age.secrets.wifi.path
      ];
      profiles = {
        Stargate-Discovery = {
          connection = {
            id = "Stargate-Discovery";
            type = "wifi";
          };
          wifi.ssid = "Stargate-Discovery";
          wifi-security = {
            auth-alg = "open";
            key-mgmt = "wpa-psk";
            psk = "$StargateDiscoveryPSK";
          };
        };
        wattson = {
          connection = {
            id = "wattson";
            type = "wifi";
          };
          wifi.ssid = "wattson";
          wifi-security = {
            auth-alg = "open";
            key-mgmt = "wpa-psk";
            psk = "$wattsonPSK";
          };
        };
        "Dustin’s iPhone" = {
          connection = {
            id = "Dustin’s iPhone";
            type = "wifi";
          };
          wifi.ssid = "Dustin’s iPhone";
          wifi-security = {
            auth-alg = "open";
            key-mgmt = "wpa-psk";
            psk = "$DustinsiPhonePSK";
          };
        };
        WeWorkWiFi = {
          "802-1x" = {
            eap = "peap;";
            identity = "$WeWorkWiFiIdentity";
            password = "$WeWorkWiFiPassword";
            phase2-auth = "mschapv2";
          };
          connection = {
            id = "WeWorkWiFi";
            type = "wifi";
          };
          wifi.ssid = "WeWorkWiFi";
          wifi-security.key-mgmt = "wpa-eap";
        };
      };
    };
  };
}