diff --git a/13-inch-thin-cannon/configuration.nix b/13-inch-thin-cannon/configuration.nix
index 672b6ff..2477ae0 100644
--- a/13-inch-thin-cannon/configuration.nix
+++ b/13-inch-thin-cannon/configuration.nix
@@ -48,6 +48,47 @@
   # switch`. Mark wg0 unmanaged so NM leaves it alone entirely.
   networking.networkmanager.unmanaged = ["interface-name:wg0"];
 
+  # DEF CON 34 conference wifi (WPA2-Enterprise, PEAP/MSCHAPv2). Matches the
+  # official instructions at https://wifireg.defcon.org/linux.html. Replace the
+  # 802-1x identity/password with your registered credentials before use.
+  # The cert is pinned per-connection only: it lives outside /etc/ssl/certs and
+  # is never added to the system trust store (security.pki.certificateFiles).
+  environment.etc."defcon34-wifi.crt".source = ../defcon34-wifi.crt;
+  networking.networkmanager.ensureProfiles.profiles = {
+    "DefCon" = {
+      connection = {
+        id = "DefCon";
+        type = "wifi";
+      };
+      wifi = {
+        mode = "infrastructure";
+        ssid = "DefCon";
+      };
+      wifi-security = {
+        auth-alg = "open";
+        group = "ccmp";
+        key-mgmt = "wpa-eap";
+        pairwise = "ccmp";
+        proto = "rsn";
+      };
+      "802-1x" = {
+        altsubject-matches = "DNS:wifireg.defcon.org";
+        ca-cert = "/etc/defcon34-wifi.crt";
+        eap = "peap";
+        identity = "YOUR_USERNAME";
+        password = "YOUR_PASSWORD";
+        phase2-auth = "mschapv2";
+      };
+      ipv4 = {
+        method = "auto";
+      };
+      ipv6 = {
+        addr-gen-mode = "stable-privacy";
+        method = "auto";
+      };
+    };
+  };
+
   # DNS over the tunnel. NM's DHCP hands us a LAN resolver (e.g.
   # 10.203.12.148) that sits on the physical subnet, so its direct route
   # beats the wg0 default route and the kill-switch drops it. Making
diff --git a/defcon34-wifi.crt b/defcon34-wifi.crt
new file mode 100644
index 0000000..d42fcb9
--- /dev/null
+++ b/defcon34-wifi.crt
@@ -0,0 +1,60 @@
+subject=CN=wifireg.defcon.org
+issuer=CN=HARICA DV TLS ECC, O=Hellenic Academic and Research Institutions CA, C=GR
+-----BEGIN CERTIFICATE-----
+MIIEmjCCBCGgAwIBAgIQKSc8vQGoeyaNzC3W/o3EbzAKBggqhkjOPQQDAzBiMQswCQYDVQQGEwJH
+UjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBD
+QTEaMBgGA1UEAwwRSEFSSUNBIERWIFRMUyBFQ0MwHhcNMjYwNzIyMjIyMjE1WhcNMjcwMjA2MjIy
+MjE0WjAdMRswGQYDVQQDDBJ3aWZpcmVnLmRlZmNvbi5vcmcwdjAQBgcqhkjOPQIBBgUrgQQAIgNi
+AATgXe2hIKYp5Ece+a8L4IlQ+lX5vnwmATcaKzPmwT0XQ65MaheLDW/y0LEQiuOmF8t5gE3SSVnH
+lPNg06ot+Lb2uWmtPYNJ2qos773SADcovCtNpMWfZqtW18nArazdpK6jggLfMIIC2zAfBgNVHSME
+GDAWgBTbgh8xTkeJ3gl8CpRjVBWIa5ZNkTBJBggrBgEFBQcBAQQ9MDswOQYIKwYBBQUHMAKGLWh0
+dHA6Ly9jcnQuaGFyaWNhLmdyL0hBUklDQS1EVi1UTFMtU3ViLUUxLmNlcjAuBgNVHREEJzAlghJ3
+aWZpcmVnLmRlZmNvbi5vcmeCD3dpZmkuZGVmY29uLm9yZzAtBgNVHSAEJjAkMAgGBmeBDAECATAI
+BgYEAI96AQYwDgYMKwYBBAGBzxEBAQEBMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA+
+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtRFYtVExTLVN1Yi1F
+MS5jcmwwHQYDVR0OBBYEFPdpW6RIMGyd24FLv2zwmcLqpRhxMA4GA1UdDwEB/wQEAwIHgDCCAX4G
+CisGAQQB1nkCBAIEggFuBIIBagFoAHYAYEyar3p/d18B1Ab8kg3ImesLHH34yVIb+voXdzuXi8kA
+AAGfi/VONQAABAMARzBFAiBlSwHfHcr/6HOV9FYTfEBS82X+iQilVKCKHLKgVrWOvgIhAMySB3hJ
+E4YqPzrgE2yKmwoOKMCJqSKaycZuiAPoETjiAHcARqI5Z8YNtkaHxm89+ZmUdpOmphEghFfVVefj
+0KHZtkYAAAGfi/VOVAAABAMASDBGAiEArn06WRAdw9A0TAfcYEjMe419alOonTPeQk4kFhMGpNQC
+IQCECnAH0csmmo9oMHgo55xAgWMxFoOF8QNYG2SgXxMDjAB1AETCvQzpFA5kpclKAZMKWqG7NZcO
+AO4RFoloKhxE17VmAAABn4v1Th4AAAQDAEYwRAIgEUhpaaV5Oi1juQgqWzOMv/LcdUNJKZrBV+RN
+U/azhC8CIHv7GiIQislEe+1V0EYhCXd+Zqap02Qe13igkJW5nLICMAoGCCqGSM49BAMDA2cAMGQC
+MGUWxJbyPBkrKEYGMYoVpQH0Wdsji2LeqdoV36CW2oi5DhIFXNyfaNfCpch8OpfnYgIwHU9iH5wB
+q2BYnAzCIRI0EI1J+IJ+pzP12O1AicXxAYR3QOLTbyD58m3rgxrzu0wU
+-----END CERTIFICATE-----
+subject=CN=HARICA DV TLS ECC, O=Hellenic Academic and Research Institutions CA, C=GR
+issuer=CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR
+-----BEGIN CERTIFICATE-----
+MIIDczCCAvigAwIBAgIQYhFm53o2Wyr/+S7JIy1TaDAKBggqhkjOPQQDAzBsMQswCQYDVQQGEwJH
+UjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBD
+QTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9vdCBDQSAyMDIxMB4XDTIxMDMxOTA5MjIzM1oX
+DTM2MDMxNTA5MjIzMlowYjELMAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWlj
+IGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExGjAYBgNVBAMMEUhBUklDQSBEViBUTFMgRUND
+MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE6CvSreH/yHFTsmv44Rd2eOYXiYeMsNpO3VXxUpUqQyae
+tnuFwsl4cwzury4KmGPQA3e4zmpJ8L2CH3xJk+K6THlRWhRNcozi5c2bO7HPgB50aaUugVkkQB1L
+xK/S9L8do4IBZzCCAWMwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBTJG1OBEv4E1RbR
+qryab7eglRluyjBUBggrBgEFBQcBAQRIMEYwRAYIKwYBBQUHMAKGOGh0dHA6Ly9yZXBvLmhhcmlj
+YS5nci9jZXJ0cy9IQVJJQ0EtVExTLVJvb3QtMjAyMS1FQ0MuY2VyMEQGA1UdIAQ9MDswOQYEVR0g
+ADAxMC8GCCsGAQUFBwIBFiNodHRwOi8vcmVwby5oYXJpY2EuZ3IvZG9jdW1lbnRzL0NQUzAdBgNV
+HSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybC5o
+YXJpY2EuZ3IvSEFSSUNBLVRMUy1Sb290LTIwMjEtRUNDLmNybDAdBgNVHQ4EFgQU24IfMU5Hid4J
+fAqUY1QViGuWTZEwDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2kAMGYCMQDcXjqcOyf4zkWB
+jPxkWSUfeUGlHlOXhZaqxDaLpAq4pj2fEwx/W280rRXUs/a36zcCMQDJ7dvkYdtad4cTZW2fNatW
+2G5Gk7/noRbGsp6wWwoAdOT3oVYa3hC4l4TYbtcVnTo=
+-----END CERTIFICATE-----
+subject=CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR
+issuer=CN=HARICA TLS ECC Root CA 2021, O=Hellenic Academic and Research Institutions CA, C=GR
+-----BEGIN CERTIFICATE-----
+MIICVDCCAdugAwIBAgIQZ3SdjXfYO2rbIvT/WeK/zjAKBggqhkjOPQQDAzBsMQswCQYDVQQGEwJH
+UjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBD
+QTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBFQ0MgUm9vdCBDQSAyMDIxMB4XDTIxMDIxOTExMDExMFoX
+DTQ1MDIxMzExMDEwOVowbDELMAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWlj
+IGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ0ExJDAiBgNVBAMMG0hBUklDQSBUTFMgRUNDIFJv
+b3QgQ0EgMjAyMTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDgI/rGgltJ6rK9JOtDA4MM7KKrxcm1l
+AEeIhPyaJmuqS7psBAqIXhfyVYf8MLA04jRYVxqEU+kw2anylnTDUR9YSTHMmE5gEYd103KUkE+b
+ECUqqHgtvpBBWJAVcqeht6NCMEAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUyRtTgRL+BNUW
+0aq8mm+3oJUZbsowDgYDVR0PAQH/BAQDAgGGMAoGCCqGSM49BAMDA2cAMGQCMBHervjcToiwqfAi
+rcJRQO9gcS3ujwLEXQNwSaSS6sUUiHCm0w2wqsosQJz76YJumgIwK0eaB8bRwoF8yguWGEEbo/Qw
+CZ61IygNnxS2PFOiTAZpffpskcYqSUXm7LcT4Tps
+-----END CERTIFICATE-----