Thierry Pouplier
9004163891
- Add gortium_password.age entry in secrets.nix - Add age.secrets.gortium_password in uConsole config - Add hashedPasswordFile to existing gortium user - Add ai-worker user for Hermes SSH access
53 lines
1.2 KiB
Nix
53 lines
1.2 KiB
Nix
{ config, lib, pkgs, keys, ... }:
|
|
|
|
{
|
|
networking.hostName = "uConsole";
|
|
time.timeZone = "America/Montreal";
|
|
i18n.defaultLocale = "en_CA.UTF-8";
|
|
system.stateVersion = "25.11";
|
|
|
|
# SSH — root access avec clés gortium + ai-worker
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
PermitRootLogin = lib.mkForce "prohibit-password";
|
|
PasswordAuthentication = lib.mkForce false;
|
|
};
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = with keys; [
|
|
users.gortium.main
|
|
users.ai-worker.main
|
|
];
|
|
|
|
# WiFi via NetworkManager + secret agenix
|
|
networking.networkmanager.enable = true;
|
|
|
|
# Firmware
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
# Hyprland Wayland compositor (manual start — no SDDM)
|
|
programs.hyprland = {
|
|
enable = true;
|
|
xwayland.enable = true;
|
|
};
|
|
|
|
|
|
}
|
|
|
|
# AI worker user (Hermes access)
|
|
users.users.ai-worker = {
|
|
isNormalUser = false;
|
|
shell = pkgs.bash;
|
|
openssh.authorizedKeys.keys = with keys; [
|
|
users.ai-worker.main
|
|
];
|
|
};
|
|
|
|
# Age secret for gortium password
|
|
age.secrets.gortium_password = {
|
|
file = ../secrets/gortium_password.age;
|
|
};
|
|
|
|
users.users.gortium.hashedPasswordFile = config.age.secrets.gortium_password.path;
|