From 59f13a5a06de41a3beba9c89a57a12574176e819 Mon Sep 17 00:00:00 2001
From: lucy <lucykaufmann@protonmail.com>
Date: Sun, 18 Oct 2026 13:31:55 +0200
Subject: [PATCH] add easyroam module

---
 modules/default.nix           |  1 +
 modules/services/easyroam.nix | 13 +++++++++++++
 modules/system/core/core.nix  |  2 +-
 3 files changed, 15 insertions(+), 1 deletion(-)
 create mode 100644 modules/services/easyroam.nix

diff --git a/modules/default.nix b/modules/default.nix
index 187e450..58a4da2 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -10,6 +10,7 @@ let
     agenix
     boot
     core
+    easyroam
     /etc/nixos/hardware-configuration.nix
   ];
 in
diff --git a/modules/services/easyroam.nix b/modules/services/easyroam.nix
new file mode 100644
index 0000000..2891250
--- /dev/null
+++ b/modules/services/easyroam.nix
@@ -0,0 +1,13 @@
+{ ... }: {
+  flake.nixosModules.easyroam = { config }: {
+    services.easyroam = {
+      enable = true;
+      pkcsFile = config.age.secrets.easyroam.path;
+      networkmanager.enable = true;
+    };
+    systemd.services.wpa_supplicant = {
+      wants = [ "easyroam-cert-setup.service" ];
+      after = [ "easyroam-cert-setup.service" ];
+    };
+  };
+}
diff --git a/modules/system/core/core.nix b/modules/system/core/core.nix
index fd74c7f..5fc22ca 100644
--- a/modules/system/core/core.nix
+++ b/modules/system/core/core.nix
@@ -16,7 +16,7 @@
     security = {
       rtkit.enable = true;
       polkit.enable = true; # polkit
-      polkit.enablePkexecWrapper = true;
+#      polkit.enablePkexecWrapper = true;
     };
     nix.settings.experimental-features = [
       "nix-command"