39 lines
1016 B
Nix
39 lines
1016 B
Nix
{ config, lib, pkgs, keys, ... }:
|
|
|
|
{
|
|
networking.hostName = "uConsole";
|
|
time.timeZone = "America/Montreal";
|
|
i18n.defaultLocale = "en_CA.UTF-8";
|
|
system.stateVersion = "25.11";
|
|
|
|
# SSH — root access avec clés gortium + ai-worker
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
PermitRootLogin = lib.mkForce "prohibit-password";
|
|
PasswordAuthentication = lib.mkForce false;
|
|
};
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = with keys; [
|
|
users.gortium.main
|
|
users.ai-worker.main
|
|
];
|
|
|
|
# WiFi via NetworkManager + secret agenix
|
|
networking.networkmanager.enable = true;
|
|
|
|
# Firmware
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
# DSI burst mode fix: remove SYNC_PULSE flag from CWU50 panel driver
|
|
# BURST and SYNC_PULSE are mutually exclusive per MIPI DSI spec;
|
|
# having both set causes display corruption on CM5
|
|
boot.kernelPatches = lib.mkAfter [
|
|
{
|
|
name = "0008-dsi-burst-fix";
|
|
patch = ./patches/0008-dsi-burst-fix.patch;
|
|
}
|
|
];
|
|
}
|