chore: use rewritten hostapd module

hosts/zackbiene/hostapd.nix

@@ -14,19 +14,18 @@
     enable = true;
     interfaces = {
       "wlan1" = {
+        logLevel = 0;
         ssid = "🍯🐝💨";
         hwMode = "g";
-        #wifi4.enable = true;
-        #wifi5.enable = true;
         countryCode = "DE";
-        # Automatic Channel Selection (ACS) is unfortunately not implemented for mt7612u.
-        channel = 13;
-
-        #wpa = 3;
-        # TODO dont adverttise!
-
-        # TODO away
-        logLevel = 0;
+        channel = 13; # Automatic Channel Selection (ACS) is unfortunately not implemented for mt7612u.
+        macAcl = "deny";
+        apIsolate = true;
+        authentication = {
+          saePasswordsFile = config.rekey.secrets.wifi-clients.path;
+          saeAddToMacAllow = true;
+        };
+        wifi4.capabilities = ["LDPC" "HT40+" "HT40-" "GF" "SHORT-GI-20" "SHORT-GI-40" "TX-STBC" "RX-STBC1"];
       };
     };
   };

hosts/zackbiene/secrets/wifi-clients.age

@@ -1,11 +1,10 @@
 age-encryption.org/v1
--> X25519 JEieTSfpgYVOG4jpaPU2Ixo5gzKfA2jADiVp2mDzo3o
-9rqppLh1oDh5+9OOIULyRc6wO6xHtuMUWlD3Cdd92cc
--> piv-p256 xqSe8Q AhmCYR/YwLhHnFGfM8ovMFKesiCRq3KZJHhCkZCjOI8U
-JpsMBhEZSirrIhrJSrxzxoH3kMafZdnwSv6AqRZRqow
--> 0-grease HqN8M8 ;L H9mxj ?vjE*x$[
-7V9ALzJ+IJAvP9aUkCaaGCCX/DKbqhJc7Ii/WWwhbX56NNXKAnMu+St1yfUdto86
-qhxQbDuVBB17Ls42W0gJxYlfwb0
---- XFjv9Cuf8BHmKEgxH4g6CJaVjz0L7ojFgfWhFlHs884
-�ˇ´*‹Ů.•\&ĎťŰ�;?–\"ôĺŚÉj¦`›DŚSiwŚśÉAźŐ™ j€‡’51•	<_ÔXńů"{‹IµpÜ«±:Ŕ±§b=Č*µţ
-ł†~#´	
+-> X25519 qvpFDcOyatSXVl605QLiHsTSQglCTjw9RvEQtWJyZkM
+5EDyHb8/v7UHfz3uvAUQmuZ6La/EN/Kdtx96WJdWQMo
+-> piv-p256 xqSe8Q ApCZ9ehw2EwREOZND16+8iDrtqWfiHw48/kRMV5WphXT
+99+R5fAwYia0GAFEq+Bo2Z/GQ7EoIuQYKOQgTEVYniU
+-> 6?-grease _E ~ e?]# X
+3UiNZDgFonwUPaWBPtFpRpFIQGc+5Mnz8ODw6YIF
+--- Tw96qV9jp6FiMfHKbfrw1bY++E7Ej6AmrcNBFMRMa2w
+uQ¶Š´ø¥[ÉélÚÞÖ<Öíäü-!™Ä‹Ù�gÆ vØÛ
+Çê!š�‰- ©6J¼²dsa�¸¦–QƒÍV‰A³	—
,$ü¨¢`Dì@“PÀ@¸Ø…vþ¦