tuda vpn

home.nix

@@ -43,7 +43,7 @@
     ./home-modules/pkgs-list/desktop.nix
     ./home-modules/pkgs-list/programs.nix
     ./home-modules/pkgs-list/shell.nix
-    ./home-modules/pnx.nix
+    # ./home-modules/pnx.nix
     ./home-modules/programming.nix
     ./home-modules/qt.nix
     ./home-modules/rclone.nix

system-modules/tuda.nix

@@ -12,41 +12,18 @@
   environment.systemPackages = with pkgs; [
     openconnect
     networkmanager-openconnect
+    (pkgs.writeShellScriptBin "connect_to_tuda" ''
+      sudo $(grep ExecStart /etc/systemd/system/openconnect-tuda.service | cut -c 11-)
+    '')
   ];
-  networking.networkmanager = {
-    plugins = with pkgs; [ networkmanager-openconnect ];
-    ensureProfiles.profiles = {
-      "tuda-vpn" = {
-        connection = {
-          autoconnect = "false";
-          id = "tuda-vpn";
-          type = "vpn";
-        };
-        ipv4.method = "auto";
-        ipv6 = {
-          addr-gen-mode = "stable-privacy";
-          method = "auto";
-        };
-        vpn = {
-          authtype = "password";
-          autoconnect-flags = "0";
-          certsigs-flags = "0";
-          cookie-flags = "2";
-          disable_udp = "no";
-          enable_csd_trojan = "no";
+  networking.openconnect = {
+    package = pkgs.openconnect;
+    interfaces = {
+      tuda = {
+        autoStart = false;
         gateway = "vpn.hrz.tu-darmstadt.de";
-          gateway-flags = "2";
-          gwcert-flags = "2";
-          lasthost-flags = "0";
-          pem_passphrase_fsid = "no";
-          prevent_invalid_cert = "no";
         protocol = "anyconnect";
-          resolve-flags = "2";
-          service-type = "org.freedesktop.NetworkManager.openconnect";
-          stoken_source = "disabled";
-          xmlconfig-flags = "0";
-          password-flags = 0;
-        };
+        user = secrets.email.tuda.tuid;
       };
     };
   };