infra/hosts/uconsole-cm5/configuration.nix

{ config, lib, pkgs, keys, ... }:

{
  networking.hostName = "uConsole";
  time.timeZone = "America/Montreal";
  i18n.defaultLocale = "en_CA.UTF-8";
  system.stateVersion = "25.11";

  # SSH — root access avec clés gortium + ai-worker
  services.openssh = {
    enable = true;
    settings = {
      PermitRootLogin = lib.mkForce "prohibit-password";
      PasswordAuthentication = lib.mkForce false;
    };
    authorizedKeysInHomedir = true;
    authorizeKeysFromNixStore = false;
  };

  users.users.root.openssh.authorizedKeys.keys = with keys; [
    users.gortium.main
    users.ai-worker.main
  ];

  # WiFi via NetworkManager + secret agenix
  networking.networkmanager.enable = true;

  # Firmware
  hardware.enableRedistributableFirmware = true;
}