{ config, ... }: {
  services.easyroam = {
    enable = true;
    pkcsFile = config.age.secrets.easyroam.path;
    networkmanager.enable = true;
  };
  systemd.services.wpa_supplicant = {
    wants = [ "easyroam-cert-setup.service" ];
    after = [ "easyroam-cert-setup.service" ];
  };
}