46 lines
1022 B
Nix
46 lines
1022 B
Nix
{ config, lib, pkgs, keys, ... }:
|
|
|
|
{
|
|
networking.hostName = "uConsole";
|
|
time.timeZone = "America/Montreal";
|
|
i18n.defaultLocale = "en_CA.UTF-8";
|
|
system.stateVersion = "25.11";
|
|
|
|
# SSH — root access avec clés gortium + ai-worker
|
|
services.openssh = {
|
|
enable = true;
|
|
settings = {
|
|
PermitRootLogin = lib.mkForce "prohibit-password";
|
|
PasswordAuthentication = lib.mkForce false;
|
|
};
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = with keys; [
|
|
users.gortium.main
|
|
users.ai-worker.main
|
|
];
|
|
|
|
# WiFi via NetworkManager + secret agenix
|
|
networking.networkmanager.enable = true;
|
|
|
|
# Firmware
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
# Hyprland Wayland compositor (manual start — no SDDM)
|
|
programs.hyprland = {
|
|
enable = true;
|
|
xwayland.enable = true;
|
|
};
|
|
|
|
|
|
}
|
|
|
|
# AI worker user (Hermes access)
|
|
users.users.ai-worker = {
|
|
isNormalUser = false;
|
|
shell = pkgs.bash;
|
|
openssh.authorizedKeys.keys = with keys; [
|
|
users.ai-worker.main
|
|
];
|
|
};
|