Fix NixOS modules: pure evaluation mode, NATS options

- Fix hostname: static value instead of /sys read (pure mode)
- Fix NATS: use settings.http_port instead of httpPort
- Add kawa-base.nix with corrected NATS options
- Update flake.nix to include all modules
- Enable SSH with PermitRootLogin for debugging

modules/kawa-physical.nix

@@ -4,8 +4,8 @@
 { pkgs, ... }:
 
 {
-  # Fixe le nom en dur pour éviter l'erreur /sys
-  networking.hostName = "honor-v4-cpu";
+  # Hostname FIXE (pas de lecture /sys - mode pur)
+  networking.hostName = "kawa-honor-v4";
 
   # Activation de Tailscale
   services.tailscale = {
@@ -17,7 +17,7 @@
     ];
   };
 
-  # CONFIGURATION OLLAMA CPU
+  # CONFIGURATION OLLAMA CPU UNIQUEMENT
   services.ollama = {
     enable = true;
     acceleration = null; # Force le mode CPU uniquement
@@ -25,7 +25,7 @@
     port = 11434;
   };
 
-  # SSH pour ton confort futur
+  # SSH activé avec PermitRootLogin pour debug
   services.openssh = {
     enable = true;
     settings = {
@@ -34,7 +34,7 @@
     };
   };
 
-  # NATS Client
+  # NATS Client (option corrigée)
   services.nats = {
     enable = true;
     server = "100.64.0.1:4222";
@@ -66,7 +66,6 @@
   users.users.kawa = {
     isNormalUser = true;
     extraGroups = [ "wheel" "networkmanager" "tailscale" "syncthing" ];
-    # Mot de passe initial (à changer)
     initialPassword = "kawa2026";
   };
 
@@ -88,17 +87,4 @@
     wget
     htop
   ];
-
-  # Systemd service pour connexion auto au mesh
-  systemd.services.kawa-mesh-connect = {
-    description = "KAWA Mesh Auto-Connect";
-    after = [ "network-online.target" "tailscale.service" ];
-    wants = [ "network-online.target" ];
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      Type = "oneshot";
-      ExecStart = "${pkgs.tailscale}/bin/tailscale up --login-server=https://headscale.du-senegal.com --authkey=f43f36ef159b3df799eb316b81bdac1b415c7cc2add174d0 --force-reauth";
-      RemainAfterExit = true;
-    };
-  };
 }