I was pretty unsatisfied that one has to choose between declarative and imperative networks when using wpa_supplicant(8). This PR modifies the module accordingly to allow both and has a patch for pkgs.wpa_supplicant to make sure that declarative networks are not silently modified via e.g. wpa_gui.
As this has a custom patch for the package, I left this as a draft since I’m not sure if we want to have this in upstream NixOS (probably as an opt-in feature though). There’s already a discussion about pros and cons in the thread which may be worth reading to understand why or why not we want to have this
(Note: I’m totally fine with getting this rejected, I’m already using this for a while and if it remains working well, I’ll just push this into my fork )
This release fixes a vulnerability where Syncthing and the relay server
can crash due to malformed relay protocol messages (CVE-2021-21404); see GHSA-x462-89pf-6r5h.
