From 17a26f8084f03b8df5b89f290c29d6b20f08cf4f Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Tue, 10 Jun 2025 11:50:28 -0500
Subject: [PATCH] add homenetwork to networking.yaml

---
 configuration.nix       | 15 ++++++++++++---
 secrets/networking.yaml | 25 +++++++++++++++++++++++++
 secrets/roy.json        |  6 +++++-
 3 files changed, 42 insertions(+), 4 deletions(-)
 create mode 100644 secrets/networking.yaml

diff --git a/configuration.nix b/configuration.nix
index e3e806e..17673a3 100755
--- a/configuration.nix
+++ b/configuration.nix
@@ -46,6 +46,10 @@
         sopsFile = ./secrets/roy.json;
         key = "testKey";
       };
+      "homeNetwork" = {
+        sopsFile = ./secrets/networking.yaml;
+        key = "homeNetwork";
+      };
     };
   };
 
@@ -57,9 +61,14 @@
 
   networking.wireless = {
     enable = true;
-    networks."flooper".pskRaw = "***REMOVED***";
-    networks."NU-Guest" = {
-      priority = -1;
+    environmentFile = config.sops.secrets."homeNetwork".path;
+    networks = {
+      "@homeSSID@" = {
+        psk = "@homePsk@";
+      };
+      "NU-Guest" = {
+        priority = -1;
+      };
     };
   };
 
diff --git a/secrets/networking.yaml b/secrets/networking.yaml
new file mode 100644
index 0000000..cdf03aa
--- /dev/null
+++ b/secrets/networking.yaml
@@ -0,0 +1,25 @@
+homeNetwork: ENC[AES256_GCM,data:ra7npifMGpqfLpSor1/nEEalyAVLc16PmLCbHFuyyp7PCfAsvJE6AU8fHq0=,iv:SdwCUU+uG/akmoW9ptr1IEGdxkKC56eFD6TY81HrUOI=,tag:tbs9N9OsYigIU5CCW/Q4AA==,type:str]
+sops:
+    age:
+        - recipient: age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaU0orRE9IeWszTitSQjdG
+            dlNwNEpzWkxjYURzVEU4U2tVdjhGdDJqNWhBCkFyclRRcU5UcFVRTVlDUGphVk51
+            U1lkbHdxZDY3R0NXMi9jdVZBSkhORWsKLS0tIEJqNk5uYzAycmJ2R3p1Q3M4alJo
+            OXFaeVhQUXBiVlpXWmtTc2ltdTRRbjgKSfka7xy0IGyQZfjNJZMedczJcRB7CCp/
+            GI/KNZ8mg/WF822Tvey/zQ8Ix3X9/YLuFx85BSuEDqgChLDRRLwqKg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6UkFnTG54THRTdG1DbHZm
+            dnNtQS9nbEwxNVB4eVloOVRqdThRSGlDaXgwCjlRTVgxT3drejlEK0RaZXQxK0VW
+            d3NPdjM2cFhvY1ZRQmRZTlAzdzFRRDQKLS0tIEMya1RrZnVRTlgwa0g4YUV3MkJu
+            Z2tIQVJzUk5JcVJ0c0YxWnUyRzhsY3MK9coZ1iRehK8JJao4b69bxAU8z+Ts7T3l
+            0P5r6195jkk0hilHxjAjrNf7aPR5IoFyj8Vw6hy/cJf7w7P8O9zHaA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-10T16:46:54Z"
+    mac: ENC[AES256_GCM,data:NuJO0LEyl6j9S78FlXPA1f+jKw5NDuaD5fAqVWJQKwxqwrS05LGdKm3imyM/0Z4kJlFVUkD6Nt3DtD5OZl7bteslKm2wUEDFaSJkQubIf1k3FCGzGlNM3h1sWUYKU0Psa6Wa/pKYgzgHtaJGYOTVUHvux19aRE3mdy80oidGsc8=,iv:nNYTBs+IeUJtn6gSzUjIMnbQnayYRbL3XENyjvpGwfc=,tag:sLI6FBPBQqqkjoivc3tvug==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2
diff --git a/secrets/roy.json b/secrets/roy.json
index b249ed5..e27d267 100644
--- a/secrets/roy.json
+++ b/secrets/roy.json
@@ -4,7 +4,11 @@
 		"age": [
 			{
 				"recipient": "age13ldedhh6ymava0d5dn54860a3f799gufknre9lfegegjt9ytes2qq5qgmr",
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByQjhlbmFna3dxalhsZlUr\nYjZ4aGVQNzZtc1NSc0dQYzA3N2JOVXN2V1hNCjcvbWxpSFVJbW14ODczcFFxTE1W\nOGd2SFo3RG1oZ1VIUTRFYmZPRzhjWjAKLS0tIEwvb3FaMHVFZmdmalhjMmt0N01z\nbHNVVDRTbi84Um4rc3lSQmRmUmc4bzgKbbrWh0AYZKgGMeiHwJnushI7wfSYJbrM\nmsHhOSC6It92ldORp10OXhknLzOpUf1vGPI//R7VB84j0cY1qt36cw==\n-----END AGE ENCRYPTED FILE-----\n"
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPN2EzcWYwV2Y4Z09xaU1U\nVUdKT1NYdjIzbGJoNFd1ZFhXaXJSbHNFc2xVCnRMdnJLamtjVVlYMy9LUnRVdVRH\nZkRtV2ZhSFI5UG96RGdEY0Z0R0x5Z0UKLS0tIFpLZ1FHeDNPejQrM3JaMSttQVJQ\nTityMnJIakpIWDJVTWJjbnppYVZUVXMKLxultaWbv6Aaw8mYupypGXs1foAsY7gb\nuqdrs5+sGaeMVOKAef1mge0Ja03Lo27vm2hschXshV13WbYay3P17Q==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1c94x3h0jj3x7zvd9rxxed7nqlckzwyttgagznzzfp3dwynpuj92snqaljm",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4T3l2RHp5Uk5IVWkvMzhI\nSnpoeGsxWG95UzVuWldocFIvMDBaUnpuM0ZBCndwZjliSjhJS0wyOHRwMFdURWpX\nNFdWV09DZ2lYcm53MTc2dVMrOTVxTWsKLS0tIFRvRWIvczJFM1FEQjY2b0NMcm1R\nOWlYcmtuOG1Gek1HZTlpMXlPNW10SEkKhMMlBcRGjp+Wzt2iT6B4p9YSrbEaGH+9\nkrTLJUptK3UYj4yNyoTsiqX14M6IFV2ymhq6mM7njxuFvSuBu3NuMA==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
 		"lastmodified": "2025-06-10T15:34:46Z",