curl https://letsencrypt.org/certs/isrgrootx1.pem -o /etc/ssl/misc/c-base.pem

copy

[Security]
EAP-Method=PEAP
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-Identity=felix
EAP-PEAP-CACert=/etc/ssl/misc/c-base.pem

[Settings]
AutoConnect=true

to /var/lib/iwd/c-base-crew.8021x

iwctl
station wlan0 connect c-base-crew

to connect