30 lines
1.0 KiB
Plaintext
30 lines
1.0 KiB
Plaintext
# DigiRadio — default Kconfig (development / first-board bring-up)
|
|
# Security: NVS + flash encryption — see docs/security-flash-nvs.md
|
|
# Production release mode: sdkconfig.defaults.production (overlay at build time)
|
|
|
|
CONFIG_IDF_TARGET="esp32s3"
|
|
|
|
# Custom partition table (nvs, otadata, OTA slots, dsp blob, nvs_keys)
|
|
CONFIG_PARTITION_TABLE_CUSTOM=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
|
|
|
|
# OTA rollback: mark app valid only after esp_ota_mark_app_valid_cancel_rollback()
|
|
CONFIG_BOOTLOADER_APP_ROLLBACK_ENABLE=y
|
|
|
|
# Flash encryption — DEVELOPMENT mode (re-flash plaintext until eFuse policy set)
|
|
# CONFIG_SECURE_FLASH_ENC_ENABLED=y
|
|
# CONFIG_SECURE_FLASH_ENCRYPTION_MODE_DEVELOPMENT=y
|
|
|
|
# NVS encryption at rest (XTS-AES; keys in nvs_keys, protected by flash encryption)
|
|
# CONFIG_NVS_ENCRYPTION=y
|
|
|
|
# C++23, exceptions and RTTI off (AGENTS.md §2)
|
|
CONFIG_COMPILER_CXX_EXCEPTIONS=n
|
|
CONFIG_COMPILER_CXX_RTTI=n
|
|
CONFIG_COMPILER_CXX_STD=23
|
|
|
|
# Logging
|
|
CONFIG_LOG_DEFAULT_LEVEL_INFO=y
|
|
CONFIG_ESPTOOLPY_FLASHSIZE_16MB=y
|
|
CONFIG_ESP_MAIN_TASK_STACK_SIZE=8192
|