[openconnect] Add openconnect-sso module

nixos/flake.nix

@@ -46,6 +46,7 @@
         (import ./overlays/cmdtime)
         (import ./overlays/icosystem)
         (import ./overlays/letter)
+        (import ./overlays/openconnect-sso)
         (import ./overlays/spotify)
       ];
 

nixos/hosts/Tibo-NixDesk/default.nix

@@ -11,6 +11,8 @@
       model = "RTX 2060";
     };
 
+    networking.openconnect-sso.enable = true;
+
     programs = {
       home-manager.enable = true;
       sops.enable = true;

nixos/hosts/Tibo-NixFat/default.nix

@@ -11,6 +11,8 @@
       model = "Quadro T2000";
     };
 
+    networking.openconnect-sso.enable = true;
+
     programs = {
       home-manager.enable = true;
       sops.enable = true;

nixos/modules/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./desktop
     ./hardware
+    ./networking
     ./programs
     ./services
     ./virtualisation

nixos/modules/networking/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./openconnect-sso
+  ];
+}

nixos/modules/networking/openconnect-sso/default.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, ... }:
+
+let
+  cfg = config.sisyphus.networking.openconnect-sso;
+in {
+  options.sisyphus.networking.openconnect-sso.enable = lib.mkEnableOption "OpenConnect SSO";
+
+  config = lib.mkIf cfg.enable {
+    nixpkgs = {
+      config.permittedInsecurePackages = [
+        "python3.10-requests-2.28.2"
+        "python3.10-cryptography-40.0.1"
+      ];
+    };
+
+    environment.systemPackages = with pkgs; [
+      openconnect-sso
+    ];
+  };
+}

nixos/overlays/openconnect-sso/default.nix

@@ -0,0 +1,4 @@
+import "${builtins.fetchTarball {
+  url = "https://github.com/vlaci/openconnect-sso/archive/master.tar.gz";
+  sha256 = "08cqd40p9vld1liyl6qrsdrilzc709scyfghfzmmja3m1m7nym94";
+}}/overlay.nix"