31 lines
760 B
Nix
31 lines
760 B
Nix
{ config, lib, pkgs, keys, ... }:
|
|
|
|
{
|
|
networking.hostName = "uConsole";
|
|
time.timeZone = "America/Montreal";
|
|
i18n.defaultLocale = "en_CA.UTF-8";
|
|
system.stateVersion = "25.11";
|
|
|
|
# SSH — root access avec clés gortium + ai-worker
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
PermitRootLogin = lib.mkForce "prohibit-password";
|
|
PasswordAuthentication = lib.mkForce false;
|
|
};
|
|
authorizedKeysInHomedir = true;
|
|
authorizeKeysFromNixStore = false;
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = with keys; [
|
|
users.gortium.main
|
|
users.ai-worker.main
|
|
];
|
|
|
|
# WiFi via NetworkManager + secret agenix
|
|
networking.networkmanager.enable = true;
|
|
|
|
# Firmware
|
|
hardware.enableRedistributableFirmware = true;
|
|
}
|