nixos/hostapd: Disable insecure TKIP by default

It's possible that setting wpa=2 disables TKIP anyway, but on my machine I could not get 802.11n to work without setting rsn_pairwise=CCMP. N.B. rsn_pairwise takes its default from wpa_pairwise.
NixOS · Oct 31, 2023 · 3fad672 · 3fad672
1 parent a7b0dc8
commit 3fad672
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/nixos/modules/services/networking/hostapd.nix b/nixos/modules/services/networking/hostapd.nix
@@ -34,6 +34,7 @@ let
 
     ${optionalString cfg.wpa ''
       wpa=2
+      wpa_pairwise=CCMP
       wpa_passphrase=${cfg.wpaPassphrase}
     ''}
     ${optionalString cfg.noScan "noscan=1"}