Extract modules from roles

modules/router-wireless-ap/default.nix

@@ -0,0 +1,171 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+let
+  routerCfg = config.services.router;
+  cfg = config.services.router.wireless;
+in {
+  options.services.router.wireless = {
+    enable = mkEnableOption "router wireless service";
+
+    wleInterface24Ghz = mkOption {
+      type = with types; nullOr str;
+      default = null;
+      example = "wlp1";
+      description = ''
+        Wireless interface name for 2.4 GHz wireless band.
+      '';
+    };
+
+    wleInterface5Ghz = mkOption {
+      type = with types; nullOr str;
+      default = null;
+      example = "wlp2";
+      description = ''
+        Wireless interface name for 5 GHz wireless band.
+      '';
+    };
+
+    ssid = mkOption {
+      type = types.str;
+      example = "MyNetwork";
+      description = ''
+        Wireless network SSID.
+      '';
+    };
+
+    passphrase = mkOption {
+      type = types.str;
+      description = ''
+        Passphrase of wireless network. May be encrypted with <literal>wpa_passphrase &lt;wleSSID&gt; &lt;passphrase&gt;</literal>.
+      '';
+    };
+
+    regulatoryCountryCode = mkOption {
+      type = types.str;
+      default = "US";
+      description = ''
+        Regulatory wireless country code.
+      '';
+    };
+  };
+
+  #imports = mkIf cfg.enable [ ./hostapd5ghz.nix ];
+  imports = [ ./hostapd5ghz.nix ];
+
+  config = let
+    wle24GhzEnabled = cfg.wleInterface24Ghz != null;
+    wle5GhzEnabled = cfg.wleInterface5Ghz != null;
+  in mkIf cfg.enable {
+    boot.extraModprobeConfig = ''
+      options cfg80211 ieee80211_regdom=${cfg.regulatoryCountryCode}
+    '';
+
+    services.udev.packages = [ pkgs.crda ]; # TODO: Still required with 20.03?
+
+    services.hostapd5ghz = {
+      enable = wle5GhzEnabled;
+      interface = cfg.wleInterface5Ghz;
+      hwMode = "a";
+      ssid = cfg.ssid;
+      wpaPassphrase = cfg.passphrase;
+      channel = 36;
+      extraConfig = ''
+        max_num_sta=255
+
+        #Details for Connecting Clients via WPA2 TKIP
+        auth_algs=1
+        wpa_key_mgmt=WPA-PSK
+        wpa_pairwise=CCMP
+        rsn_pairwise=CCMP
+
+        #802.11d Regulatory Restrictions Designations for Which Frequencies and Channels are Legal
+        ieee80211d=1
+        # DFS
+        #ieee80211h=1
+        country_code=${cfg.regulatoryCountryCode}
+
+        #802.11n Configurations
+        ieee80211n=1
+
+        #802.11ac Configurations
+        ieee80211ac=1
+        vht_oper_chwidth=1
+        vht_oper_centr_freq_seg0_idx=42
+
+
+        #How Many Units of Time Between Beacon Transmissions
+        #beacon_int=100
+        #Multiplier of How Many Units of Time Between Beacon Transmissions
+        #dtim_period=2
+        #(e.g. 100 milliseconds(ms) * 2 = 200 ms between beacons)
+
+        #QoS Type of Traffic Management Based on Traffic Type
+        wmm_enabled=1
+
+        ##Background
+        #wmm_ac_bk_cwmin=4
+        #wmm_ac_bk_cwmax=10
+        #wmm_ac_bk_aifs=7
+        #wmm_ac_bk_txop_limit=0
+        #wmm_ac_bk_acm=0
+
+        ##Best Effort
+        #wmm_ac_be_aifs=3
+        #wmm_ac_be_cwmin=4
+        #wmm_ac_be_cwmax=10
+        #wmm_ac_be_txop_limit=0
+        #wmm_ac_be_acm=0
+
+        ##Video
+        #wmm_ac_vi_aifs=2
+        #wmm_ac_vi_cwmin=3
+        #wmm_ac_vi_cwmax=4
+        #wmm_ac_vi_txop_limit=94
+        #wmm_ac_vi_acm=0
+
+        ##Voice
+        #wmm_ac_vo_aifs=2
+        #wmm_ac_vo_cwmin=2
+        #wmm_ac_vo_cwmax=3
+        #wmm_ac_vo_txop_limit=47
+        #wmm_ac_vo_acm=0
+      '';
+    };
+
+    services.hostapd = {
+      enable = wle24GhzEnabled;
+      interface = cfg.wleInterface24Ghz;
+      hwMode = "g";
+      ssid = cfg.ssid;
+      wpaPassphrase = cfg.passphrase;
+      channel = 6;
+      extraConfig = ''
+
+        #macaddr_acl sets options for mac address filtering. 0 means "accept unless in deny list"
+        macaddr_acl=0
+
+        #setting ignore_broadcast_ssid to 1 will disable the broadcasting of ssid
+        ignore_broadcast_ssid=0
+
+        #Sets authentication algorithm
+        #1 - only open system authentication
+        #2 - both open system authentication and shared key authentication
+        auth_algs=1
+
+        #####Sets WPA2 authentication#####
+        #sets wpa key management
+        wpa_key_mgmt=WPA-PSK
+        #sets encryption used by WPA
+        wpa_pairwise=TKIP
+        #sets encryption used by WPA2
+        rsn_pairwise=CCMP
+
+        #### even more options ####
+        wme_enabled=1
+        ieee80211n=1
+      '';
+    };
+  };
+}