diff --git a/flake.nix b/flake.nix
index e2df411..aadf5d0 100644
--- a/flake.nix
+++ b/flake.nix
@@ -185,19 +185,20 @@
                 allowReboot = false;
               };
 
-              # Env template — runtime secrets provisioned via provision-atm.sh
+              # Env template — runtime secrets provisioned via provision-atm.sh.
+              # Fields are intentionally empty so a fresh disk image boots
+              # cleanly into the "needs provisioning" state; provision-atm.sh
+              # SSHes in and overwrites with real values.
               system.activationScripts.bitspire-env = ''
                 mkdir -p /var/lib/bitspire
                 if [ ! -f /var/lib/bitspire/.env ]; then
                   cp ${pkgs.writeText "bitspire-env-default" ''
                     VITE_RELAY_URL=
-                    VITE_LIGHTNING_PUB_PUBKEY=
-                    VITE_LIGHTNING_PUB_API_URL=
-                    VITE_ADMIN_TOKEN=
+                    VITE_LNBITS_SERVER_PUBKEY=
+                    VITE_LNBITS_HTTP_URL=
                     VITE_ATM_PRIVATE_KEY=
-                    VITE_EXTENSION_API_URL=
                     VITE_APP_ID=
-                    VITE_LNDCONNECT_URL=
+                    VITE_OPERATOR_PUBKEYS=
                     VITE_LAMASSU_MACHINE_MODEL=${machineModel}
                     VITE_LAMASSU_FIAT_CODE=${fiatCode}
                     ELECTRON_FORCE_PROD=1
@@ -277,6 +278,9 @@
         # Installed-to-disk configs (proper GPT + systemd-boot, supports nixos-rebuild)
         douro-installed = mkInstalledConfig "douro" ./deploy/nixos/hardware/douro.nix;
         tejo-installed = mkInstalledConfig "tejo" ./deploy/nixos/hardware/upboard.nix;
+        # Sintra shares Aaeon UP Board hardware with tejo (same validator
+        # at ttyJ5, dispenser at ttyJ7 layout) — reuse the same hw module.
+        sintra-installed = mkInstalledConfig "sintra" ./deploy/nixos/hardware/upboard.nix;
         batm3-installed = mkInstalledConfig "batm3" ./deploy/nixos/hardware/batm3.nix;
       };
 
@@ -309,6 +313,14 @@
           diskSize = "auto";
         };
 
+        disk-image-sintra = import (nixpkgs + "/nixos/lib/make-disk-image.nix") {
+          inherit pkgs lib;
+          config = self.nixosConfigurations.sintra-installed.config;
+          format = "raw";
+          partitionTableType = "efi";
+          diskSize = "auto";
+        };
+
         # Backwards compat
         iso = self.nixosConfigurations.douro.config.system.build.isoImage;
       };