From d614186ef9a5426c0d3c6d4de85f4d03a0a45d80 Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Sun, 15 Feb 2026 15:10:48 +0100
Subject: [PATCH] backwards: Use `NetworkManager` for wifi

---
 hosts/backwards/modules/network/default.nix | 51 ++++++++++++---------
 1 file changed, 29 insertions(+), 22 deletions(-)

diff --git a/hosts/backwards/modules/network/default.nix b/hosts/backwards/modules/network/default.nix
index 619931a..1760a5e 100644
--- a/hosts/backwards/modules/network/default.nix
+++ b/hosts/backwards/modules/network/default.nix
@@ -3,33 +3,40 @@
   networking = {
     hostName = "backwards";
 
-    networkmanager.enable = false;
+    wireless.enable = false;
 
-    #wireless.networks are defined in the secret `wpa_supplicant.conf`
-    wireless = {
+    networkmanager = {
       enable = true;
 
-      secretsFile = config.age.secrets.wireless-network-secrets.path;
+      wifi.backend = "iwd";
 
-      networks = {
-        "w1-f1_5G" = {
-          pskRaw = "ext:w1-f1_psk";
-        };
-      };
-    };
+      ensureProfiles = {
+        environmentFiles = [
+          config.age.secrets.wireless-network-secrets.path
+        ];
 
-    defaultGateway = "192.168.50.1";
-    nameservers = [ "1.1.1.1" ];
-    interfaces = {
-      wlp1s0 = {
-        useDHCP = false;
-        ipv4 = {
-          addresses = [
-            {
-              address = "192.168.50.202";
-              prefixLength = 24;
-            }
-          ];
+        profiles = {
+          w1-f1_5G = {
+            connection = {
+              id = "w1-f1_5G";
+              type = "wifi";
+              interface-name = "wlp1s0";
+            };
+            wifi = {
+              ssid = "w1-f1_5G";
+              mode = "infrastructure";
+            };
+            wifi-security = {
+              key-mgmt = "wpa-psk";
+              psk = "$w1_f1_psk";
+            };
+            ipv4 = {
+              method = "manual";
+              addresses = "192.168.50.202/24";
+              gateway = "192.168.50.1";
+              dns = "1.1.1.1";
+            };
+          };
         };
       };
     };