Factory security: per-device SSH passphrase, factory seal, password onboarding, remove PDF generator

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/4222f228-615c-4303-8286-979264c6f782 Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
2026-04-07 14:23:59 +00:00
parent d14e25c29f
commit f80c8a0481
6 changed files with 244 additions and 334 deletions
--- a/modules/modules.nix
+++ b/modules/modules.nix
@@ -12,6 +12,7 @@
    ./core/sovran_systemsos-desktop.nix
    ./core/sshd-localhost.nix
    ./core/sovran-hub.nix
+    ./core/factory-seal.nix

    # ── Always on (no flag) ───────────────────────────────────
    ./php.nix