dotfiles/role/router-wireless-ap/default.nix

{ config, lib, pkgs, ... }:

with lib;

let
  routerCfg = config.services.router;
  cfg = config.services.router.wireless;
in {
  options.services.router.wireless = {
    enable = mkEnableOption "router wireless service";

    wleInterface24Ghz = mkOption {
      type = with types; nullOr str;
      default = null;
      example = "wlp1";
      description = ''
        Wireless interface name for 2.4 GHz wireless band.
      '';
    };

    wleInterface5Ghz = mkOption {
      type = with types; nullOr str;
      default = null;
      example = "wlp2";
      description = ''
        Wireless interface name for 5 GHz wireless band.
      '';
    };

    ssid = mkOption {
      type = types.str;
      example = "MyNetwork";
      description = ''
        Wireless network SSID.
      '';
    };

    passphrase = mkOption {
      type = types.str;
      description = ''
        Passphrase of wireless network. May be encrypted with <literal>wpa_passphrase &lt;wleSSID&gt; &lt;passphrase&gt;</literal>.
      '';
    };

    regulatoryCountryCode = mkOption {
      type = types.str;
      default = "US";
      description = ''
        Regulatory wireless country code.
      '';
    };
  };

  #imports = mkIf cfg.enable [ ./hostapd5ghz.nix ];
  imports = [ ./hostapd5ghz.nix ];

  config = let
    wle24GhzEnabled = cfg.wleInterface24Ghz != null;
    wle5GhzEnabled = cfg.wleInterface5Ghz != null;
  in mkIf cfg.enable {
    boot.extraModprobeConfig = ''
      options cfg80211 ieee80211_regdom=${cfg.regulatoryCountryCode}
    '';

    services.udev.packages = [ pkgs.crda ]; # TODO: Still required with 20.03?

    services.hostapd5ghz = {
      enable = wle5GhzEnabled;
      interface = cfg.wleInterface5Ghz;
      hwMode = "a";
      ssid = cfg.ssid;
      wpaPassphrase = cfg.passphrase;
      channel = 36;
      extraConfig = ''
        max_num_sta=255

        #Details for Connecting Clients via WPA2 TKIP
        auth_algs=1
        wpa_key_mgmt=WPA-PSK
        wpa_pairwise=CCMP
        rsn_pairwise=CCMP

        #802.11d Regulatory Restrictions Designations for Which Frequencies and Channels are Legal
        ieee80211d=1
        # DFS
        #ieee80211h=1
        country_code=${cfg.regulatoryCountryCode}

        #802.11n Configurations
        ieee80211n=1

        #802.11ac Configurations
        ieee80211ac=1
        vht_oper_chwidth=1
        vht_oper_centr_freq_seg0_idx=42


        #How Many Units of Time Between Beacon Transmissions
        #beacon_int=100
        #Multiplier of How Many Units of Time Between Beacon Transmissions
        #dtim_period=2
        #(e.g. 100 milliseconds(ms) * 2 = 200 ms between beacons)

        #QoS Type of Traffic Management Based on Traffic Type
        wmm_enabled=1

        ##Background
        #wmm_ac_bk_cwmin=4
        #wmm_ac_bk_cwmax=10
        #wmm_ac_bk_aifs=7
        #wmm_ac_bk_txop_limit=0
        #wmm_ac_bk_acm=0

        ##Best Effort
        #wmm_ac_be_aifs=3
        #wmm_ac_be_cwmin=4
        #wmm_ac_be_cwmax=10
        #wmm_ac_be_txop_limit=0
        #wmm_ac_be_acm=0

        ##Video
        #wmm_ac_vi_aifs=2
        #wmm_ac_vi_cwmin=3
        #wmm_ac_vi_cwmax=4
        #wmm_ac_vi_txop_limit=94
        #wmm_ac_vi_acm=0

        ##Voice
        #wmm_ac_vo_aifs=2
        #wmm_ac_vo_cwmin=2
        #wmm_ac_vo_cwmax=3
        #wmm_ac_vo_txop_limit=47
        #wmm_ac_vo_acm=0
      '';
    };

    services.hostapd = {
      enable = wle24GhzEnabled;
      interface = cfg.wleInterface24Ghz;
      hwMode = "g";
      ssid = cfg.ssid;
      wpaPassphrase = cfg.passphrase;
      channel = 6;
      extraConfig = ''

        #macaddr_acl sets options for mac address filtering. 0 means "accept unless in deny list"
        macaddr_acl=0

        #setting ignore_broadcast_ssid to 1 will disable the broadcasting of ssid
        ignore_broadcast_ssid=0

        #Sets authentication algorithm
        #1 - only open system authentication
        #2 - both open system authentication and shared key authentication
        auth_algs=1

        #####Sets WPA2 authentication#####
        #sets wpa key management
        wpa_key_mgmt=WPA-PSK
        #sets encryption used by WPA
        wpa_pairwise=TKIP
        #sets encryption used by WPA2
        rsn_pairwise=CCMP

        #### even more options ####
        wme_enabled=1
        ieee80211n=1
      '';
    };
  };
}