infra/hosts/uconsole-cm5/configuration.nix

{ config, lib, pkgs, keys, ... }:

{
  networking.hostName = "uConsole";
  time.timeZone = "America/Montreal";
  i18n.defaultLocale = "en_CA.UTF-8";
  system.stateVersion = "25.11";

  # SSH — root access avec clés gortium + ai-worker
  services.openssh = {
    enable = true;
    settings = {
      PermitRootLogin = lib.mkForce "prohibit-password";
      PasswordAuthentication = lib.mkForce false;
    };
  };

  users.users.root.openssh.authorizedKeys.keys = with keys; [
    users.gortium.main
    users.ai-worker.main
  ];

  # WiFi via NetworkManager + secret agenix
  networking.networkmanager.enable = true;

  # Firmware
  hardware.enableRedistributableFirmware = true;

  # Hyprland Wayland compositor (manual start — no SDDM)
  programs.hyprland = {
    enable = true;
    xwayland.enable = true;
  };

  # Override pipewire to drop libcamera (fixes cross-compile: rpi-pisp subproject blocked)
  nixpkgs.overlays = [
    (final: prev: {
      pipewire = prev.pipewire.override { libcamera = null; };
    })
  ];
}