Add freeradius

machines/raven/services/default.nix

@@ -3,6 +3,7 @@
     ./asterisk.nix
     ./dnsmasq.nix
     ./dyndns.nix
+    ./freeradius.nix
     ./labsync
     ./unifi-controller.nix
   ];

machines/raven/services/freeradius.nix

@@ -0,0 +1,17 @@
+# service for unifi wifi
+# provides anonymous access via WPA2 enterprise (PEAP)
+{ pkgs, ... }:
+
+{
+  services.freeradius = {
+    enable = true;
+    configDir = "${pkgs.fablab.freeradius-anon-access}/raddb";
+    debug = true;
+  };
+  users.users.radius.group = "radius";
+  users.groups.radius = { };
+  networking.firewall.allowedUDPPorts = [
+    1812
+    1813
+  ];
+}

pkgs/fablab/default.nix

@@ -1,5 +1,6 @@
 { callPackage }:
 
 {
+  freeradius-anon-access = callPackage ./freeradius-anon-access { };
   mitgliedsantrag = callPackage ./mitgliedsantrag { };
 }

pkgs/fablab/freeradius-anon-access/default.nix

@@ -0,0 +1,14 @@
+{ lib, stdenvNoCC, ... }:
+
+stdenvNoCC.mkDerivation {
+  name = "freeradius-anon-access";
+  src = ./.;
+  dontBuild = true;
+  installPhase = ''
+    mkdir $out
+    cp -r raddb $out
+  '';
+  meta = with lib; {
+    platforms = platforms.unix;
+  };
+}