fix: update compose submodule for Matrix bridge deps + persistent venv

Updates assets/compose submodule to 8adbbf0 (compose fix/matrix-bridge-deps).

Compose commit adds:
- uv pip install openai mautrix[encryption] to hermes entrypoint
- Persistent venv volume at /opt/hermes/.venv
- Empty-volume first-boot handling (venv recreation)

This ensures Matrix bridge dependencies survive container recreation.

flake.nix

@@ -12,21 +12,18 @@
       url = "git+https://git.lix.systems/lix-project/lix?ref=main";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    nixpkgs-uconsole.url = "github:NixOS/nixpkgs/nixos-25.11";
     nixos-uconsole = {
-      url = "github:nixos-uconsole/nixos-uconsole/v1.1.0";
+      url = "github:nixos-uconsole/nixos-uconsole";
-      inputs.nixpkgs.follows = "nixpkgs-uconsole";
+      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.nixos-raspberrypi.follows = "nixos-raspberrypi";
     };
     nixos-raspberrypi = {
-      url = "github:gortium/nixos-raspberrypi/cm5-cross-v1";
+      url = "github:nvmd/nixos-raspberrypi/v1.20260317.0";
-      inputs.nixpkgs.follows = "nixpkgs-uconsole";
+      inputs.nixpkgs.follows = "nixpkgs";
     };
+    self.submodules = true;
   };
 
-  outputs = { self, nixpkgs, agenix, lix
+  outputs = { self, nixpkgs, agenix, lix, nixos-uconsole, nixos-raspberrypi, ... }@inputs:
-            , nixpkgs-uconsole, nixos-uconsole, nixos-raspberrypi
-            , ... }@inputs:
     let
       system = "x86_64-linux";
       keys = import ./lib/keys.nix;
@@ -37,16 +34,20 @@
           "/etc/ssh/ssh_host_ed25519_key"
           "/root/.age/bootstrap.key" ];
       };
-      overlays = [ agenix.overlays.default ];
+      overlays = [ agenix.overlays.default (import ./overlays/reticulum.nix) ];
       pkgs = import nixpkgs {
         inherit system overlays;
         config.allowUnfree = true;
-        config.permittedInsecurePackages = [ "openclaw-2026.3.12" ];
+        config.permittedInsecurePackages = [
+          "openclaw-2026.3.12"
+        ];
       };
+
       devShell = import ./shells/nix_dev.nix {
         inherit pkgs system agenix;
       };
-    in {
+    in
+      {
         nixosConfigurations = {
           lazyworkhorse = nixpkgs.lib.nixosSystem {
             specialArgs = { inherit system self keys paths inputs; };
@@ -55,7 +56,9 @@
                 nixpkgs.overlays = overlays;
                 nixpkgs.config.allowUnfree = true;
                 nixpkgs.config.rocmSupport = true;
-              nixpkgs.config.permittedInsecurePackages = [ "openclaw-2026.3.12" ];
+                nixpkgs.config.permittedInsecurePackages = [
+                  "openclaw-2026.3.12"
+                ];
                 nix.package = lix.packages.${system}.default;
               }
               agenix.nixosModules.default
@@ -86,71 +89,22 @@
             ];
           };
 
-        uconsole-cm5 = nixpkgs-uconsole.lib.nixosSystem {
+          uConsole = nixos-raspberrypi.lib.nixosSystem {
-          system = "aarch64-linux";
+            specialArgs = { inherit self keys paths inputs nixos-raspberrypi; };
-          specialArgs = {
-            inherit self keys paths inputs;
-            nixos-raspberrypi = nixos-raspberrypi;
-            isCM4 = false;
-          };
             modules = [
               {
-              nixpkgs.buildPlatform = "x86_64-linux";
+                nixpkgs.overlays = overlays;
-              nixpkgs.hostPlatform = "aarch64-linux";
                 nixpkgs.config.allowUnfree = true;
-              boot.loader.raspberry-pi.bootloader = "kernel";
-            }
-            nixos-raspberrypi.nixosModules.nixpkgs-rpi
-            # Fix display timings from Rex's kernel: native 720x1280 instead of
-            # rotated 1280x720, plus DCS-based panel detection.
-            ({ lib, ... }: {
-              boot.kernelPatches = [{
-                name = "panel-cwu50-rex-timing-fix";
-                patch = ./patches/0008-panel-cwu50-rex-timing-fix.patch;
-              }];
-            })
-            nixos-raspberrypi.nixosModules.raspberry-pi-5.base
-            nixos-raspberrypi.lib.inject-overlays
-            nixos-raspberrypi.lib.inject-overlays-global
-            nixos-uconsole.nixosModules.uconsole-cm5
-            ({ config, lib, pkgs, inputs, ... }: let
-              lix-cross = import inputs.nixpkgs-uconsole {
-                localSystem = { system = "x86_64-linux"; };
-                crossSystem = { system = "aarch64-linux"; };
-                overlays = [ inputs.lix.overlays.default ];
-              };
-            in { nix.package = lix-cross.lix; })
-            agenix.nixosModules.default
-            ./hosts/uconsole-cm5/configuration.nix
-            ./hosts/uconsole-cm5/hardware-configuration.nix
-          ];
-        };
-      };
-
-      devShells.${system}.default = devShell;
-
-      packages.${system} = {
-        uconsole-cm5-image = (nixos-raspberrypi.lib.nixosSystem {
-          system = "aarch64-linux";
-          specialArgs = {
-            inherit self keys inputs;
-            nixos-raspberrypi = nixos-raspberrypi;
-            isCM4 = false;
-          };
-          modules = [
-            {
-              nixpkgs.buildPlatform = system;
                 nixpkgs.hostPlatform = "aarch64-linux";
+                nix.package = lix.packages."aarch64-linux".default;
               }
-            nixos-raspberrypi.nixosModules.nixpkgs-rpi
               nixos-raspberrypi.nixosModules.raspberry-pi-5.base
-            nixos-raspberrypi.lib.inject-overlays-global
-            nixos-raspberrypi.nixosModules.sd-image
               nixos-uconsole.nixosModules.uconsole-cm5
-            agenix.nixosModules.default
+              ./hosts/uConsole/configuration.nix
-            ./hosts/uconsole-cm5/configuration.nix
+              ./hosts/uConsole/hardware-configuration.nix
             ];
-        }).config.system.build.sdImage;
           };
         };
+        devShells.${system}.default = devShell;
+      };
 }

hosts/lazyworkhorse/configuration.nix

@@ -11,10 +11,6 @@
   # Flakesss
   nix.settings.experimental-features = [ "nix-command" "flakes" "flake-self-attrs" ];
   nix.settings.trusted-users = [ "root" "gortium" ];
-  nix.settings.extra-platforms = [ "aarch64-linux" ];
-
-  # QEMU binfmt for cross-building aarch64 NixOS targets
-  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
 
   # Garbage collection
   nix.gc = {

hosts/uConsole/configuration.nix

@@ -1,4 +1,4 @@
-{ config, lib, pkgs, paths, self, keys, ... }:
+{ config, lib, pkgs, paths, self, ... }:
 
 {
   # Basic Host Info
@@ -9,17 +9,15 @@
   # System State
   system.stateVersion = "25.05";
 
-  # Boot & Hardware (migrated to kernel bootloader per nixos-raspberrypi deprecation notice)
+  # Boot & Hardware (uconsole-cm5 module handles boot.loader)
-  boot.loader.raspberry-pi.bootloader = "kernel";
+  boot.kernelPackages = pkgs.linuxPackages_latest;
-  # kernel managed by nixos-raspberrypi module — don't override, patches are version-specific
-  # boot.kernelPackages = pkgs.linuxPackages_latest;
 
   # Networking
   networking.networkmanager.enable = true;
   services.openssh = {
     enable = true;
-    settings.PermitRootLogin = lib.mkForce "prohibit-password";
+    settings.PermitRootLogin = "prohibit-password";
-    settings.PasswordAuthentication = lib.mkForce false;
+    settings.PasswordAuthentication = false;
   };
 
   # User
@@ -108,7 +106,6 @@
   # ============================================================
   systemd.services.rnsd = {
     description = "Reticulum Network Stack Daemon";
-    wants = [ "network-online.target" ];
     after = [ "network-online.target" ];
     wantedBy = [ "multi-user.target" ];
     serviceConfig = {
@@ -126,7 +123,6 @@
   # ============================================================
   systemd.services.kismet = {
     description = "Kismet Wi-Fi Monitor & IDS";
-    wants = [ "network-online.target" ];
     after = [ "network-online.target" ];
     wantedBy = [ "multi-user.target" ];
     serviceConfig = {

overlays/reticulum.nix

@@ -5,7 +5,6 @@ in {
   reticulumStack = python3.pkgs.buildPythonApplication rec {
     pname = "reticulum";
     version = "1.2.9";
-    format = "setuptools";
     src = pyPkgs.fetchPypi {
       pname = "rns";
       inherit version;
@@ -25,7 +24,6 @@ in {
   lxmf = python3.pkgs.buildPythonApplication rec {
     pname = "lxmf";
     version = "0.9.8";
-    format = "setuptools";
     src = pyPkgs.fetchPypi {
       inherit pname version;
       sha256 = "30f39f3a975a049c12ee2cfceb3261d24cb5adec881c6821f7354464b3f3650c";
@@ -44,7 +42,6 @@ in {
   nomadnet = python3.pkgs.buildPythonApplication rec {
     pname = "nomadnet";
     version = "1.1.1";
-    format = "setuptools";
     src = pyPkgs.fetchPypi {
       inherit pname version;
       sha256 = "fa13b64a10e75b705a58024815ab72451700aa726af96d415ba99dec28dfc40a";
@@ -63,7 +60,6 @@ in {
   rnsh = python3.pkgs.buildPythonApplication rec {
     pname = "rnsh";
     version = "0.1.7";
-    format = "setuptools";
     src = pyPkgs.fetchPypi {
       inherit pname version;
       sha256 = "9cb72f25abb1c6d300f8014b264184ff78f592fe88e36094938012990b797c93";

patches/0008-panel-cwu50-rex-timing-fix.patch

@@ -1,45 +0,0 @@
---- a/drivers/gpu/drm/panel/panel-cwu50.c
-+++ b/drivers/gpu/drm/panel/panel-cwu50.c
-@@ -27,12 +27,12 @@ static const struct drm_display_mode default_mode = {
- 	.clock = 61020,
--	.hdisplay = 1280,
--	.hsync_start = 1280 + 8,
--	.hsync_end = 1280 + 8 + 2,
--	.htotal = 1280 + 8 + 2 + 16,
--	.vdisplay = 720,
--	.vsync_start = 720 + 30,
--	.vsync_end = 720 + 30 + 15,
--	.vtotal = 720 + 30 + 15 + 15,
-+	.hdisplay = 720,
-+	.hsync_start = 720 + 30,
-+	.hsync_end = 720 + 30 + 15,
-+	.htotal = 720 + 30 + 15 + 15,
-+	.vdisplay = 1280,
-+	.vsync_start = 1280 + 8,
-+	.vsync_end = 1280 + 8 + 2,
-+	.vtotal = 1280 + 8 + 2 + 16,
- };
- 
- static inline struct cwu50 *panel_to_cwu50(struct drm_panel *panel)
-@@ -586,7 +586,8 @@ static int cwu50_init_sequence2(struct cwu50 *ctx)
- {
- 	struct mipi_dsi_device *dsi = to_mipi_dsi_device(ctx->dev);
--	int err;
-+	int err;
-+	u8 buf[4];
- 
- 	dcs_write_seq(0xE0,0x00);
- 
-@@ -633,6 +634,12 @@ static int cwu50_init_sequence2(struct cwu50 *ctx)
- 
- 	dcs_write_seq(0x11);// SLPOUT
- 	msleep (200);
-+	dcs_write_seq(0xE0,0x00);
-+	mipi_dsi_dcs_read(dsi, 0x04, buf, 3);
-+
-+	if(buf[0] == 0x39) ctx->is_new_panel = 1;
-+
-+	dcs_write_seq(0xE0,0x00);
- 
- 	dcs_write_seq(0x29);// DSiPON
- 	msleep (100);