diff --git a/system-modules/networking.nix b/system-modules/networking.nix
index d59a557..e872364 100755
--- a/system-modules/networking.nix
+++ b/system-modules/networking.nix
@@ -19,4 +19,14 @@
       443
     ];
   };
+  environment.etc = {
+    "ssl/certs/tuda-eduroam-root.crt".source = "${pkgs.cacert.unbundled}/etc/ssl/certs/T-TeleSec_GlobalRoot_Class_2:1.crt";
+  };
+  sops.secrets = {
+    "eduroam/tuda_nmconnection" = {
+      mode = "0600";
+      owner = "root";
+      path = "/etc/NetworkManager/system-connections/eduroam.nmconnection";
+    };
+  };
 }