fix(openconnect): ugent sso

nixos/hosts/Tibo-NixDesk/default.nix

@@ -19,7 +19,7 @@
 
     networking = {
       networkmanager.enable = true;
-      openconnect-sso.enable = true;
+      openconnect.enable = true;
       openvpn.enable = true;
       tailscale.enable = true;
     };

nixos/hosts/Tibo-NixFat/default.nix

@@ -22,7 +22,7 @@
 
     networking = {
       networkmanager.enable = true;
-      openconnect-sso.enable = true;
+      openconnect.enable = true;
       tailscale.enable = true;
     };
 

nixos/hosts/Tibo-NixTop/default.nix

@@ -25,7 +25,7 @@
 
     networking = {
       networkmanager.enable = true;
-      #openconnect-sso.enable = true;
+      openconnect.enable = true;
       openvpn.enable = true;
       tailscale.enable = true;
     };

nixos/modules/networking/default.nix

@@ -1,7 +1,7 @@
 {
   imports = [
     ./networkmanager
-    ./openconnect-sso
+    ./openconnect
     ./openvpn
     ./tailscale
   ];

nixos/modules/networking/openconnect-sso/default.nix

@@ -1,13 +0,0 @@
-{ config, inputs, lib, pkgs, ... }:
-
-let
-  cfg = config.sisyphus.networking.openconnect-sso;
-in {
-  options.sisyphus.networking.openconnect-sso.enable = lib.mkEnableOption "OpenConnect SSO";
-
-  config = lib.mkIf cfg.enable {
-    environment.systemPackages = with pkgs; [
-      inputs.openconnect-sso.packages.${config.nixpkgs.localSystem.system}.default
-    ];
-  };
-}

nixos/modules/networking/openconnect/default.nix

@@ -0,0 +1,22 @@
+{ config, inputs, lib, pkgs, ... }:
+
+let
+  cfg = config.sisyphus.networking.openconnect;
+
+  ugentVpn = pkgs.writeShellApplication {
+    name = "ugent-vpn";
+    runtimeInputs = with pkgs; [
+      openconnect
+    ];
+    text = builtins.readFile ./ugent-vpn.sh;
+  };
+in {
+  options.sisyphus.networking.openconnect.enable = lib.mkEnableOption "OpenConnect";
+
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      openconnect
+      ugentVpn
+    ];
+  };
+}

nixos/modules/networking/openconnect/ugent-vpn.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+set -e
+
+echo 'Starting UGent SSO authentication...'
+eval "$( openconnect --authenticate --protocol=anyconnect vpn.ugent.be )"
+
+if [ -z "${COOKIE}" ]; then
+  echo 'Authentication failed or was aborted.'
+  exit 1
+fi
+
+echo 'Authentication successful. Establishing tunnel...'
+sudo openconnect --protocol=anyconnect --cookie="${COOKIE}" "${CONNECT_URL}" --servercert="${FINGERPRINT}" --resolve="${RESOLVE}"
+