From 01b766e5ee10bba9cb5879180a0c79c4d80ca7b4 Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Tue, 25 Jun 2024 13:46:46 +0800
Subject: [PATCH] devices.vps4: setup

---
 devices/vps4/default.nix            |  12 +++++++++---
 modules/system/fileSystems/vps4.key | Bin 0 -> 291 bytes
 modules/user/chn/default.nix        |   1 +
 3 files changed, 10 insertions(+), 3 deletions(-)
 create mode 100644 modules/system/fileSystems/vps4.key

diff --git a/devices/vps4/default.nix b/devices/vps4/default.nix
index 37f70dde..11f14968 100644
--- a/devices/vps4/default.nix
+++ b/devices/vps4/default.nix
@@ -12,19 +12,25 @@ inputs:
           {
             btrfs =
             {
-              "/dev/disk/by-uuid/24577c0e-d56b-45ba-8b36-95a848228600"."/boot" = "/boot";
+              "/dev/disk/by-uuid/403fe853-8648-4c16-b2b5-3dfa88aee351"."/boot" = "/boot";
               "/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
             };
           };
+          decrypt.manual =
+          {
+            enable = true;
+            devices."/dev/disk/by-uuid/bf7646f9-496c-484e-ada0-30335da57068" = { mapper = "root"; ssd = true; };
+            delayedMount = [ "/" ];
+          };
           swap = [ "/nix/swap/swap" ];
           rollingRootfs = {};
         };
-        grub.installDevice = "/dev/disk/by-path/pci-0000:00:05.0-scsi-0:0:0:0";
+        grub.installDevice = "/dev/disk/by-path/pci-0000:00:04.0";
         nixpkgs.march = "znver2";
         nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
         initrd.sshd.enable = true;
         networking = { hostname = "vps4"; networkd = {}; };
-        kernel.variant = "cachyos-server";
+        kernel.variant = "xanmod-latest";
       };
       services =
       {
diff --git a/modules/system/fileSystems/vps4.key b/modules/system/fileSystems/vps4.key
new file mode 100644
index 0000000000000000000000000000000000000000..7ca24f61fd6de615cb6684da76471b16da5b6334
GIT binary patch
literal 291
zcmV+;0o?wCUIQD_nmWRP0Fe>_2S6LdjowhV7n{#qT>)~+fg7&$tO>3VHegcC;;p>#
zTO}~2;V9XM;jdm<L^ul9JooAeRT7p)cQ+PxkE2!@nEw-I`SaN!6rdfHN<CfICdEzE
zzyJXW0uUdIUF@dWWj(M`O1*=+&;-Ayg6jFo?O!JOWQbnO(rS}q>g|$bbG$$KNyk%f
zEV*UPrdA>=0%O;sRP0-)28v8`MWaaN+iY#t<L9C$812eQ#73PYe&X&%y7HyB6d`+{
zZ=py=>bsqsZMfL}Wb4T&ZO@M(a14cbEeTOvrVdI5jL$#g*~dKG4^#0P1i6G<Rqrz6
pDIq^uz`h<~qa!A#)LXs&EqmuEmJla)Q6V|0I+5Ppfw({YSI{XBjhFxc

literal 0
HcmV?d00001

diff --git a/modules/user/chn/default.nix b/modules/user/chn/default.nix
index 92fa4953..2b876558 100644
--- a/modules/user/chn/default.nix
+++ b/modules/user/chn/default.nix
@@ -61,6 +61,7 @@ inputs:
                 cat = "${inputs.pkgs.coreutils}/bin/cat";
                 gpg = "${inputs.pkgs.gnupg}/bin/gpg";
                 ssh = "${inputs.pkgs.openssh}/bin/ssh";
+              # generate using echo -n key | gpg --encrypt --recipient chn > xxx.key
               in inputs.pkgs.writeShellScriptBin "remote-decrypt" (builtins.concatStringsSep "\n"
                 (
                   (builtins.map (system: builtins.concatStringsSep "\n"