home writes nmconfig and .ssl

configuration.nix

@@ -60,14 +60,8 @@
   #hardware.pulseaudio.enable = true;
 
   # rtkit is optional but recommended
-  security = {
-    rtkit.enable = true;
-    pki.certificates = [ 
-      secrets.easyroamHSMW.clientKey
-      secrets.easyroamHSMW.clientCert
-      secrets.easyroamHSMW.rootCa
-    ];  
-  };
+  security.rtkit.enable = true; 
+
 
 
   services.pipewire = {

home.nix

@@ -88,8 +88,18 @@
   # };
 
 
-  # Home Manager is pretty good at managing dotfiles. The primary way to manage
-  # plain files is through 'home.file'.
+  # NETWORKING
+  home.file = {
+    # easyroam HSMW
+    ".ssl/easyroam_client_cert.pem".source = ./secrets/easyroam-hsmw/easyroam_client_cert.pem;
+    ".ssl/easyroam_root_ca.pem".source = ./secrets/easyroam-hsmw/easyroam_root_ca.pem;
+    ".ssl/easyroam_client_key.pem".source = ./secrets/easyroam-hsmw/easyroam_client_key.pem;
+  };
+    networking.networkmanager.extraConfig = concatStringsSep "\n" [
+      secrets.eduroamHSMW.nmconfig
+    ];
+
+
   home.file = {
 
     # ".config/libinput/gestures".text = ''