fix(monero): pool Stratum MoneroOcean et seuil thermique du Deck

profiles/deck/configuration.nix

@@ -88,6 +88,8 @@
     home = "/var/lib/hermes";
     createHome = true;
     shell = pkgs.zsh;
+    # Permet a l'agent de lire `journalctl -u <service>` sur le Deck.
+    extraGroups = [ "systemd-journal" ];
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKF3huPUXHP6P6SBXHHw9k7HGh6Cs8ntoRk2pnqrG2Hc hermes@tower"
     ];
@@ -190,11 +192,15 @@
   services.monero-miner = {
     enable = true;
     wallet = "46WTCDFTfzZ7uxKToJ27nN3v1RcGqEGACHWjVxgdcJLMGfZZLdyeTo2JoGksFCrpS7HMEm8yT8iKHPNdiMHXGEY3CS8drV6";
+    pool = "gulf.moneroocean.stream:10008";
+    tls = false;
     threads = 8;
     cpuQuota = 800;
     rigId = "steamdeck";
     chargeLimit = 80;
     thermalGuard.enable = true;
+    thermalGuard.maxTemperature = 88;
+    thermalGuard.resumeTemperature = 78;
   };
 
   networking.hostName = "deck";

services/monero-miner/default.nix

@@ -104,7 +104,7 @@ in
 
     pool = lib.mkOption {
       type = lib.types.str;
-      default = "moneroocean.stream:443";
+      default = "gulf.moneroocean.stream:10008";
       description = "Endpoint Stratum du pool, au format host:port.";
     };
 
@@ -116,8 +116,12 @@ in
 
     tls = lib.mkOption {
       type = lib.types.bool;
-      default = true;
-      description = "Active TLS vers le pool (le port 443 de MoneroOcean le supporte).";
+      default = false;
+      description = ''
+        Active TLS vers le pool. MoneroOcean ne le propose pas sur son port
+        Stratum (contrairement a son dashboard HTTPS) ; laisser false pour lui.
+        Le Stratum ne transporte que l'adresse publique du portefeuille.
+      '';
     };
 
     threads = lib.mkOption {