c76c1ee61b
Wire ESP-IDF's built-in 150-CA root bundle to the OTA HTTP client so HTTPS OTA verifies server certificates. Pin bundle config in sdkconfig.defaults. Replace dead artifact-copy step with Gitea release creation on tag push. Bump CI container to IDF v5.5.
105 lines
2.0 KiB
Plaintext
105 lines
2.0 KiB
Plaintext
#
|
|
# Wi-Fi
|
|
#
|
|
CONFIG_ESP32_WIFI_CSI_ENABLED=y
|
|
CONFIG_ESP32_WIFI_AMPDU_TX_ENABLED=
|
|
CONFIG_ESP32_WIFI_DYNAMIC_RX_BUFFER_NUM=128
|
|
|
|
#
|
|
# UART
|
|
#
|
|
CONFIG_ESP_CONSOLE_UART_CUSTOM=y
|
|
CONFIG_ESP_CONSOLE_UART=y
|
|
CONFIG_ESP_CONSOLE_UART_NUM=0
|
|
CONFIG_CONSOLE_UART_BAUDRATE=921600
|
|
|
|
CONFIG_ESP_TASK_WDT_TIMEOUT_S=30
|
|
CONFIG_ESP_TASK_WDT_PANIC=y
|
|
|
|
CONFIG_ESPTOOLPY_MONITOR_BAUD_921600B=y
|
|
CONFIG_ESPTOOLPY_MONITOR_BAUD=921600
|
|
|
|
|
|
#
|
|
# Wi-Fi
|
|
#
|
|
CONFIG_ESP32_WIFI_CSI_ENABLED=y
|
|
CONFIG_ESP32_WIFI_AMPDU_TX_ENABLED=
|
|
CONFIG_ESP32_WIFI_AMPDU_RX_ENABLED=
|
|
|
|
#
|
|
# Compiler options (size optimization saves ~75 KB)
|
|
#
|
|
CONFIG_COMPILER_OPTIMIZATION_SIZE=y
|
|
CONFIG_COMPILER_STACK_CHECK_MODE_NORM=y
|
|
CONFIG_HEAP_POISONING_LIGHT=y
|
|
|
|
#
|
|
# FreeRTOS
|
|
#
|
|
CONFIG_FREERTOS_HZ=1000
|
|
CONFIG_FREERTOS_USE_TRACE_FACILITY=y
|
|
CONFIG_FREERTOS_GENERATE_RUN_TIME_STATS=y
|
|
CONFIG_FREERTOS_USE_STATS_FORMATTING_FUNCTIONS=y
|
|
|
|
#
|
|
# ESP32-specific
|
|
#
|
|
CONFIG_ESP32_DEFAULT_CPU_FREQ_240=y
|
|
CONFIG_ESP32_DEFAULT_CPU_FREQ_MHZ=240
|
|
|
|
CONFIG_ESP32_WIFI_DYNAMIC_TX_BUFFER_NUM=32
|
|
|
|
#
|
|
# ESP32S3-specific
|
|
#
|
|
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_240=y
|
|
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_MHZ=240
|
|
|
|
#
|
|
# Flash & Partitions (4MB flash, dual OTA)
|
|
#
|
|
CONFIG_ESPTOOLPY_FLASHSIZE_4MB=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
|
|
|
|
#
|
|
# OTA Updates
|
|
#
|
|
CONFIG_BOOTLOADER_APP_ROLLBACK_ENABLE=y
|
|
CONFIG_ESP_HTTPS_OTA_ALLOW_HTTP=y
|
|
|
|
#
|
|
# TLS Certificate Bundle (CA root store for HTTPS OTA)
|
|
#
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y
|
|
|
|
#
|
|
# BLE (NimBLE, scan-only, WiFi coexistence)
|
|
#
|
|
CONFIG_BT_ENABLED=y
|
|
CONFIG_BTDM_CTRL_MODE_BLE_ONLY=y
|
|
CONFIG_BTDM_CTRL_MODE_BR_EDR_ONLY=n
|
|
CONFIG_BTDM_CTRL_MODE_BTDM=n
|
|
CONFIG_BT_BLUEDROID_ENABLED=n
|
|
CONFIG_BT_NIMBLE_ENABLED=y
|
|
CONFIG_ESP_WIFI_IRAM_OPT=n
|
|
|
|
#
|
|
# Power Management
|
|
#
|
|
CONFIG_PM_ENABLE=y
|
|
CONFIG_FREERTOS_USE_TICKLESS_IDLE=y
|
|
|
|
#
|
|
# WiFi Authentication (reject open/WEP APs)
|
|
#
|
|
CONFIG_EXAMPLE_WIFI_AUTH_WPA2_WPA3_PSK=y
|
|
|
|
#
|
|
# Protected Management Frames (802.11w) — prevent deauth attacks
|
|
#
|
|
CONFIG_ESP_WIFI_PMF_ENABLED=y
|
|
CONFIG_ESP_WIFI_PMF_REQUIRED=y
|