Hostapd

`services.hostapd.enable`

Whether to enable hostapd, a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators, RADIUS client, EAP server, and RADIUS authentication server . Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.package`

The hostapd package to use. Type: package

Default

pkgs.hostapd

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios`

This option allows you to define APs for one or multiple physical radios. At least one radio must be specified.

For each radio, hostapd requires a separate logical interface (like wlp3s0, wlp3s1, ...). A default interface is usually be created automatically by your system, but to use multiple radios of a single device, it may be required to create additional logical interfaces for example by using {option}networking.wlanInterfaces.

Each physical radio can only support a single hardware-mode that is configured via ({option}services.hostapd.radios.<radio>.band). To create a dual-band or tri-band AP, you will have to use a device that has multiple physical radios and supports configuring multiple APs (Refer to valid interface combinations in {command}iw list).

Type: attribute set of (submodule)

Default

{ }

Example

`#!nix { # Simple 2.4GHz AP wlp2s0 = { # countryCode = "US"; networks.wlp2s0 = { ssid = "AP 1"; authentication.saePasswords = [{ password = "a flakey password"; }]; # Use saePasswordsFile if possible. }; };

# WiFi 5 (5GHz) with two advertised networks wlp3s0 = { band = "5g"; channel = 0; # Enable automatic channel selection (ACS). Use only if your hardware supports it. # countryCode = "US"; networks.wlp3s0 = { ssid = "My AP"; authentication.saePasswords = [{ password = "a flakey password"; }]; # Use saePasswordsFile if possible. }; networks.wlp3s0-1 = { ssid = "Open AP with WiFi5"; authentication.mode = "none"; }; };

# Legacy WPA2 example wlp4s0 = { # countryCode = "US"; networks.wlp4s0 = { ssid = "AP 2"; authentication = { mode = "wpa2-sha256"; wpaPassword = "a flakey password"; # Use wpaPasswordFile if possible. }; }; }; } `

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.band`

Specifies the frequency band to use, possible values are 2g for 2.4 GHz, 5g for 5 GHz, 6g for 6 GHz and 60g for 60 GHz.

Type: one of "2g", "5g", "6g", "60g"

Default

"2g"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.channel`

The channel to operate on. Use 0 to enable ACS (Automatic Channel Selection). Beware that not every device supports ACS in which case {command}hostapd will fail to start.

Type: signed integer

Default

7

Example

11

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.countryCode`

Country code (ISO/IEC 3166-1). Used to set regulatory domain. Set as needed to indicate country in which device is operating. This can limit available channels and transmit power. These two octets are used as the first two octets of the Country String (dot11CountryString).

Setting this will force you to also enable IEEE 802.11d and IEEE 802.11h.

IEEE 802.11d: This advertises the countryCode and the set of allowed channels and transmit power levels based on the regulatory limits.

IEEE802.11h: This enables radar detection and DFS (Dynamic Frequency Selection) support if available. DFS support is required on outdoor 5 GHz channels in most countries of the world.

Type: null or string

Default

null

Example

"US"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.driver`

The driver {command}hostapd will use. {var}nl80211 is used with all Linux mac80211 drivers. {var}none is used if building a standalone RADIUS server that does not control any wireless/wired driver. Most applications will probably use the default.

Type: string

Default

"nl80211"

Example

"none"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.dynamicConfigScripts`

All of these scripts will be executed in lexicographical order before hostapd is started, right after the global segment was generated and may dynamically append global options the generated configuration file.

The first argument will point to the configuration file that you may append to.

Type: attribute set of path

Default

{ }

Example

`#!nix { exampleDynamicConfig = pkgs.writeShellScript "dynamic-config" '' HOSTAPD_CONFIG=$1

cat >> "$HOSTAPD_CONFIG" << EOF
# Add some dynamically generated statements here,
# for example based on the physical adapter in use
EOF

''; } `

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks`

This defines a BSS, colloquially known as a WiFi network. You have to specify at least one.

Type: attribute set of (submodule)

Default

{ }

Example

{wlp2s0 = {ssid = "Primary advertised network";authentication.saePasswords = [{ password = "a flakey password"; }]; # Use saePasswordsFile if possible.};wlp2s0-1 = {ssid = "Secondary advertised network (Open)";authentication.mode = "none";};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.apIsolate`

Isolate traffic between stations (clients) and prevent them from communicating with each other.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.enableRecommendedPairwiseCiphers`

Additionally enable the recommended set of pairwise ciphers. This enables newer secure ciphers, additionally to those defined in {option}pairwiseCiphers. You will have to test whether your hardware supports these by trial-and-error, because even if iw list indicates hardware support, your driver might not expose it.

Beware {command}hostapd will most likely not return a useful error message in case this is enabled despite the driver or hardware not supporting the newer ciphers. Look out for messages like Failed to set beacon parameters.

Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.mode`

Selects the authentication mode for this AP.

{var}"none": Don't configure any authentication. This will disable wpa alltogether and create an open AP. Use {option}settings together with this option if you want to configure the authentication manually. Any password options will still be effective, if set.
{var}"wpa2-sha1": Not recommended. WPA2-Personal using HMAC-SHA1. Passwords are set using {option}wpaPassword or preferably by {option}wpaPasswordFile or {option}wpaPskFile.
{var}"wpa2-sha256": WPA2-Personal using HMAC-SHA256 (IEEE 802.11i/RSN). Passwords are set using {option}wpaPassword or preferably by {option}wpaPasswordFile or {option}wpaPskFile.
{var}"wpa3-sae-transition": Use WPA3-Personal (SAE) if possible, otherwise fallback to WPA2-SHA256. Only use if necessary and switch to the newer WPA3-SAE when possible. You will have to specify both {option}wpaPassword and {option}saePasswords (or one of their alternatives).
{var}"wpa3-sae": Use WPA3-Personal (SAE). This is currently the recommended way to setup a secured WiFi AP (as of March 2023) and therefore the default. Passwords are set using either {option}saePasswords or preferably {option}saePasswordsFile.

Type: one of "none", "wpa2-sha1", "wpa2-sha256", "wpa3-sae-transition", "wpa3-sae"

Default

"wpa3-sae"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.pairwiseCiphers`

Set of accepted cipher suites (encryption algorithms) for pairwise keys (unicast packets). By default this allows just CCMP, which is the only commonly supported secure option. Use {option}enableRecommendedPairwiseCiphers to also enable newer recommended ciphers.

Please refer to the hostapd documentation for allowed values. Generally, only CCMP or GCMP modes should be considered safe options. Most devices support CCMP while GCMP is often only available with devices supporting WiFi 5 (IEEE 802.11ac) or higher.

Type: list of string

Default

["CCMP"]

Example

["CCMP-256""GCMP-256"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saeAddToMacAllow`

If set, all sae password entries that have a non-wildcard MAC associated to them will additionally be used to populate the MAC allow list. This is additional to any entries set via {option}macAllow or {option}macAllowFile.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords`

Sets allowed passwords for WPA3-SAE.

The last matching (based on peer MAC address and identifier) entry is used to select which password to use. An empty string has the special meaning of removing all previously added entries.

Warning: These entries will get put into a world-readable file in the Nix store! Using {option}saePasswordFile instead is recommended.

Not used when {option}mode is {var}"wpa2-sha1" or {var}"wpa2-sha256".

Type: list of (submodule)

Default

[ ]

Example

`#!nix [ # Any client may use these passwords { password = "Wi-Figure it out"; }

# Only the client with MAC-address 11:22:33:44:55:66 can use this password { password = "sekret pazzword"; mac = "11:22:33:44:55:66"; } ] `

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords.*.id`

If this attribute is given with non-zero length, it will set the password identifier for this entry. It can then only be used with that identifier.

Type: null or string

Default

null

Example

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords.*.mac`

If this attribute is not included, or if is set to the wildcard address (ff:ff:ff:ff:ff:ff), the entry is available for any station (client) to use. If a specific peer MAC address is included, only a station with that MAC address is allowed to use the entry.

Type: null or string

Default

null

Example

"11:22:33:44:55:66"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords.*.password`

The password for this entry. SAE technically imposes no restrictions on password length or character set. But due to limitations of {command}hostapd's config file format, a true newline character cannot be parsed.

Warning: This password will get put into a world-readable file in the Nix store! Using {option}wpaPasswordFile or {option}wpaPskFile is recommended.

Type: string

Example

"a flakey password"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords.*.pk`

If this attribute is given, SAE-PK will be enabled for this connection. This prevents evil-twin attacks, but a public key is required additionally to connect. (Essentially adds pubkey authentication such that the client can verify identity of the AP)

Type: null or string

Default

null

Example

""

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswords.*.vlanid`

If this attribute is given, all clients using this entry will get tagged with the given VLAN ID. Type: null or signed integer

Default

null

Example

1

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.saePasswordsFile`

Sets the password for WPA3-SAE. Follows the same rules as {option}saePasswords, but reads the entries from the given file to prevent them from being put into the Nix store.

One entry per line, empty lines and lines beginning with # will be ignored. Each line must match the following format, although the order of optional parameters doesn't matter: <password>[|mac=<peer mac>][|vlanid=<VLAN ID>][|pk=<m:ECPrivateKey-base64>][|id=<identifier>]

Not used when {option}mode is {var}"wpa2-sha1" or {var}"wpa2-sha256".

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.wpaPassword`

Sets the password for WPA-PSK that will be converted to the pre-shared key. The password length must be in the range [8, 63] characters. While some devices may allow arbitrary characters (such as UTF-8) to be used, but the standard specifies that each character in the passphrase must be an ASCII character in the range [0x20, 0x7e] (IEEE Std. 802.11i-2004, Annex H.4.1). Use emojis at your own risk.

Not used when {option}mode is {var}"wpa3-sae".

Warning: This password will get put into a world-readable file in the Nix store! Using {option}wpaPasswordFile or {option}wpaPskFile instead is recommended.

Type: null or string

Default

null

Example

"a flakey password"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.wpaPasswordFile`

Sets the password for WPA-PSK. Follows the same rules as {option}wpaPassword, but reads the password from the given file to prevent the password from being put into the Nix store.

Not used when {option}mode is {var}"wpa3-sae".

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.authentication.wpaPskFile`

Sets the password(s) for WPA-PSK. Similar to {option}wpaPasswordFile, but additionally allows specifying multiple passwords, and some other options.

Each line, except for empty lines and lines starting with #, must contain a MAC address and either a 64-hex-digit PSK or a password separated with a space. The password must follow the same rules as outlined in {option}wpaPassword. The special MAC address 00:00:00:00:00:00 can be used to configure PSKs that any client can use.

An optional key identifier can be added by prefixing the line with keyid=<keyid_string> An optional VLAN ID can be specified by prefixing the line with vlanid=<VLAN ID>. An optional WPS tag can be added by prefixing the line with wps=<0/1> (default: 0). Any matching entry with that tag will be used when generating a PSK for a WPS Enrollee instead of generating a new random per-Enrollee PSK.

Not used when {option}mode is {var}"wpa3-sae".

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.bssid`

Specifies the BSSID for this BSS. Usually determined automatically, but for now you have to manually specify them when using multiple BSS. Try assigning related addresses from the locally administered MAC address ranges, by reusing the hardware address but replacing the second nibble with 2, 6, A or E. (e.g. if real address is XX:XX:XX:XX:XX, try X2:XX:XX:XX:XX:XX, X6:XX:XX:XX:XX:XX, ... for the second, third, ... BSS)

Type: null or string

Default

null

Example

"11:22:33:44:55:66"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.dynamicConfigScripts`

All of these scripts will be executed in lexicographical order before hostapd is started, right after the bss segment was generated and may dynamically append bss options to the generated configuration file.

The first argument will point to the configuration file that you may append to. The second and third argument will point to this BSS's MAC allow and MAC deny file respectively.

Type: attribute set of path

Default

{ }

Example

`#!nix { exampleDynamicConfig = pkgs.writeShellScript "dynamic-config" '' HOSTAPD_CONFIG=$1 # These always exist, but may or may not be used depending on the actual configuration MAC_ALLOW_FILE=$2 MAC_DENY_FILE=$3

cat >> "$HOSTAPD_CONFIG" << EOF
# Add some dynamically generated statements here
EOF

''; } `

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.group`

Members of this group can access the control socket for this interface.

Type: string

Default

"wheel"

Example

"network"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.ignoreBroadcastSsid`

Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID. Note that this does not increase security, since your clients will then broadcast the SSID instead, which can increase congestion.

{var}"disabled": Advertise ssid normally.
{var}"empty": send empty (length=0) SSID in beacon and ignore probe request for broadcast SSID
{var}"clear": clear SSID (ASCII 0), but keep the original length (this may be required with some legacy clients that do not support empty SSID) and ignore probe requests for broadcast SSID. Only use this if empty does not work with your clients.

Type: one of "disabled", "empty", "clear"

Default

"disabled"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.logLevel`

Levels (minimum value for logged events): 0 = verbose debugging 1 = debugging 2 = informational messages 3 = notification 4 = warning

Type: signed integer

Default

2

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.macAcl`

Station MAC address -based authentication. The following modes are available:

{var}"deny": Allow unless listed in {option}macDeny (default)
{var}"allow": Deny unless listed in {option}macAllow
{var}"radius": Use external radius server, but check both {option}macAllow and {option}macDeny first

Please note that this kind of access control requires a driver that uses hostapd to take care of management frame processing and as such, this can be used with driver=hostap or driver=nl80211, but not with driver=atheros.

Type: one of "deny", "allow", "radius"

Default

"deny"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.macAllow`

Specifies the MAC addresses to allow if {option}macAcl is set to {var}"allow" or {var}"radius". These values will be world-readable in the Nix store. Values will automatically be merged with {option}macAllowFile if necessary.

Type: list of string

Default

[ ]

Example

["11:22:33:44:55:66"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.macAllowFile`

Specifies a file containing the MAC addresses to allow if {option}macAcl is set to {var}"allow" or {var}"radius". The file should contain exactly one MAC address per line. Comments and empty lines are ignored, only lines starting with a valid MAC address will be considered (e.g. 11:22:33:44:55:66) and any content after the MAC address is ignored.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.macDeny`

Specifies the MAC addresses to deny if {option}macAcl is set to {var}"deny" or {var}"radius". These values will be world-readable in the Nix store. Values will automatically be merged with {option}macDenyFile if necessary.

Type: list of string

Default

[ ]

Example

["11:22:33:44:55:66"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.macDenyFile`

Specifies a file containing the MAC addresses to deny if {option}macAcl is set to {var}"deny" or {var}"radius". The file should contain exactly one MAC address per line. Comments and empty lines are ignored, only lines starting with a valid MAC address will be considered (e.g. 11:22:33:44:55:66) and any content after the MAC address is ignored.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.settings`

Extra configuration options to put at the end of this BSS's defintion in the hostapd.conf for the associated interface. To find out which options are global and which are per-bss you have to read hostapd's source code, which is non-trivial and not documented otherwise.

Lists will be converted to multiple definitions of the same key, and booleans to 0/1. Otherwise, the inputs are not modified or checked for correctness.

Type: attribute set of (atom (bool, int or string) or a list of them for duplicate keys)

Default

{ }

Example

{multi_ap = true;}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.ssid`

SSID to be used in IEEE 802.11 management frames. Type: string

Example

"❄️ cool ❄️"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.networks.<name>.utf8Ssid`

Whether the SSID is to be interpreted using UTF-8 encoding. Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.noScan`

Disables scan for overlapping BSSs in HT40+/- mode. Caution: turning this on will likely violate regulatory requirements!

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.settings`

Extra configuration options to put at the end of global initialization, before defining BSSs. To find out which options are global and which are per-bss you have to read hostapd's source code, which is non-trivial and not documented otherwise.

Lists will be converted to multiple definitions of the same key, and booleans to 0/1. Otherwise, the inputs are not modified or checked for correctness.

Type: attribute set of (atom (bool, int or string) or a list of them for duplicate keys)

Default

{ }

Example

{acs_exclude_dfs = true;}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi4.capabilities`

HT (High Throughput) capabilities given as a list of flags. Please refer to the hostapd documentation for allowed values and only set values supported by your physical adapter.

The default contains common values supported by most adapters.

Type: list of string

Default

["HT40""HT40-""SHORT-GI-20""SHORT-GI-40"]

Example

["LDPC""HT40+""HT40-""GF""SHORT-GI-20""SHORT-GI-40""TX-STBC""RX-STBC1"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi4.enable`

Enables support for IEEE 802.11n (WiFi 4, HT). This is enabled by default, since the vase majority of devices are expected to support this.

Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi4.require`

Require stations (clients) to support WiFi 4 (HT) and disassociate them if they don't. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi5.capabilities`

VHT (Very High Throughput) capabilities given as a list of flags. Please refer to the hostapd documentation for allowed values and only set values supported by your physical adapter.

Type: list of string

Default

[ ]

Example

["SHORT-GI-80""TX-STBC-2BY1""RX-STBC-1""RX-ANTENNA-PATTERN""TX-ANTENNA-PATTERN"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi5.enable`

Enables support for IEEE 802.11ac (WiFi 5, VHT) Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi5.operatingChannelWidth`

Determines the operating channel width for VHT.

{var}"20or40": 20 or 40 MHz operating channel width
{var}"80": 80 MHz channel width
{var}"160": 160 MHz channel width
{var}"80+80": 80+80 MHz channel width

Type: one of "20or40", "80", "160", "80+80"

Default

"20or40"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi5.require`

Require stations (clients) to support WiFi 5 (VHT) and disassociate them if they don't. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.enable`

Enables support for IEEE 802.11ax (WiFi 6, HE) Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.multiUserBeamformer`

HE multi user beamformee support Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.operatingChannelWidth`

Determines the operating channel width for HE.

{var}"20or40": 20 or 40 MHz operating channel width
{var}"80": 80 MHz channel width
{var}"160": 160 MHz channel width
{var}"80+80": 80+80 MHz channel width

Type: one of "20or40", "80", "160", "80+80"

Default

"20or40"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.require`

Require stations (clients) to support WiFi 6 (HE) and disassociate them if they don't. Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.singleUserBeamformee`

HE single user beamformee support Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi6.singleUserBeamformer`

HE single user beamformer support Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/networking/hostapd.nix

`services.hostapd.radios.<name>.wifi7.enable`

Enables support for IEEE 802.11be (WiFi 7, EHT). This is currently experimental and requires you to manually enable CONFIG_IEEE80211BE when building hostapd.

Type: boolean