It took me a while to get Eduroam working at the University of Amsterdam (UvA).
This approach did not work for me. (The UvA doesn’t follow this installer set-up).
But this works for me (works with agenix):
networking.networkmanager.enable = false;
networking.wireless = {
secretsFile = "/run/agenix/secret1";
enable = true;
userControlled.enable = true;
networks = {
"eduroam" = {
hidden = true;
priority = 2;
auth = ''
key_mgmt=WPA-EAP
eap=TTLS
identity="uvaid@uva.nl" #not your email but your id + @uva.nl
password=ext:eduroam_password
anonymous_identity="anonymous@uva.nl"
phase2="auth=PAP"
'';
};