packages.plasma: patch krfb dialog

hardware: disable some support for server
system.kernel: only install scx for server-extra
2026-01-12 13:39:23 +08:00 · 2024-04-26 11:05:14 +08:00 · 2024-04-25 17:55:57 +08:00 · 2024-04-25 15:32:17 +08:00 · 2024-04-25 15:32:17 +08:00 · 2024-04-25 15:32:08 +08:00
86 changed files with 1788 additions and 1192 deletions
--- a/devices/nas/default.nix
+++ b/devices/nas/default.nix
@@ -43,16 +43,12 @@ inputs:
        grub.installDevice = "efi";
        nixpkgs.march = "silvermont";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
-        kernel.patches = [ "cjktty" "lantian" ];
        networking = { hostname = "nas"; networkd = {}; };
-        gui.preferred = false;
      };
      hardware = { cpus = [ "intel" ]; gpu.type = "intel"; };
-      packages.packageSet = "desktop-fat";
      services =
      {
        snapper.enable = true;
-        fontconfig.enable = true;
        samba =
        {
          enable = true;
@@ -61,7 +57,6 @@ inputs:
        };
        sshd = {};
        xray.client.dae.wanInterface = [ "enp3s0" ];
-        xrdp = { enable = true; hostname = [ "nas.chn.moe" "office.chn.moe" ]; };
        groupshare = {};
        smartd.enable = true;
        beesd.instances =
@@ -69,13 +64,6 @@ inputs:
          root = { device = "/"; hashTableSizeMB = 4096; threads = 4; };
          nix = { device = "/nix"; hashTableSizeMB = 128; };
        };
-        frpClient =
-        {
-          enable = true;
-          serverName = "frp.chn.moe";
-          user = "nas";
-          stcp.hpc = { localIp = "hpc.xmu.edu.cn"; localPort = 22; };
-        };
        nginx = { enable = true; applications.webdav.instances."local.webdav.chn.moe" = {}; };
        wireguard =
        {
--- a/devices/nas/secrets.yaml
+++ b/devices/nas/secrets.yaml
@@ -7,10 +7,6 @@ users:
    zem: ENC[AES256_GCM,data:VCVLfGO9a06XhAOBciFf1u7A5jaQikAt2wZf+dCAi1BglXpM6Hof1yAunadYOwLOBFgGlP19kX53CBBlZtaqZFL2GRDzXP0woQ==,iv:AFYtHCCkzNrllN/fjQ8GKYs2TyV3uj3BsU5n1tBQAmM=,tag:5dP7c5N4yG2NS4T+Vg0Zpg==,type:str]
    yjq: ENC[AES256_GCM,data:yn6eGrySCxlRsFioaE2p1qlTHkIGC9l64+edjuDvt232xc+iFeD03EYfuulyr0GxYFwnlAwtaJnyMi5eOrSd1W6HeV3Canzdbw==,iv:qTc6vA8uQza8CB+BvffEN9GqHkiwNM4h9RkqQR14ylk=,tag:UZ2GYCJLjcWLuVXlscLviw==,type:str]
    gb: ENC[AES256_GCM,data:jIR3EVdATYUgWmW4J8RdURJRmDBC84t0S/c2EzWwtFMtjgKlqg52fIfQ66i7RnIYRAoF+s4Ex0aLSejWgzQ69NA/AF0AIS7Y/Q==,iv:mvTCTP0E74QlvM8TcY4o49G5kNGs5HFx3YUrj6mCrwM=,tag:LXfIOyAB10XuHA6Cg7LBeQ==,type:str]
-frp:
-    token: ENC[AES256_GCM,data:zYRZoWa3Llv0NiPXtSfhWUn+wt4uIcw8Wa+QBTzn7gLk6UVIA4FD7FLABBKoFbwg62Fo79Nn,iv:YZdOYkJf6BN76Z68nCtetKElJkqKiYmcx6UmLoIXSdo=,tag:5sC2vt3Z21KhgOU9mrfXhg==,type:str]
-    stcp:
-        hpc: ENC[AES256_GCM,data:lkpM4nzt8ymQ+5eV,iv:LvSShCSN8w0VsJYjICG9NWCMiw7NSPpoSZ+I2t7uILs=,tag:LLry5z4KpPdnN75x8dANqg==,type:str]
 nginx:
    detectAuth:
        chn: ENC[AES256_GCM,data:44vsExbVhO3gnD4Gme92eQ==,iv:LyDvZebs1sDL1/hZQiZdHoPBm4hXtBy56jR73zSH6Aw=,tag:w5xPHnK9XOSS0+97q8b5gQ==,type:str]
@@ -41,8 +37,8 @@ sops:
            by9Rd0U0bzNiK21BQTNxN1RuQ09DQVkKJmSlzV5ppEkZFljsS17ZWmoI++fz4tJh
            kTdoAStG1zsKASHyZTsmdm3RBDO3qV1KhQC2gC7d4EiwNZngxOOZJg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-03-07T12:35:21Z"
-    mac: ENC[AES256_GCM,data:bR4PPHaGX6VCRP+Ze96sccnwYxnZkfpmJp6iMBzr+W3JRd0VjTEwTH8aNn1WIsNFXco+BCmwroJR07oKYnbusBYgiEeHnkhXvyAELETs7BitH8JrUtSsGs2wJDfkU9fWf6BNT7oHGpP69Tyrl+8v+Q8jyLV8kW8+c7uJPyT2ACQ=,iv:Hl2eX7TV6lgWjUim0m4r44Ji0c9QDH+qzpDyBOTeVp4=,tag:6xkFMQMwEP7IhpXEB4o+hQ==,type:str]
+    lastmodified: "2024-04-18T13:51:13Z"
+    mac: ENC[AES256_GCM,data:mRJEowQNw1aczxkxcBt9Y0LCfv7Q10Of5Bo7nuTYES5/DVRHK8ZRILm9w2/5+jpcRdpFnkvfOZ6yMu0YPipEfa/LeLJIDMHPbp2qgafZ1XSaanT9EC+vr6Lc5tqKoPnDD00+HtX9LqpDOhWvBkuS874O2Hg9HUZd/PrfCj3oFes=,iv:wqbIVCXWtslBfkzyJ5ZLFlyT1GUuu76yk9zlw05is8E=,tag:bkyyWqIrLlfOPlhxsS+a8g==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/devices/pc/default.nix
+++ b/devices/pc/default.nix
@@ -54,9 +54,10 @@ inputs:
        };
        nixpkgs =
          { march = "znver4"; cuda = { enable = true; capabilities = [ "8.9" ]; forwardCompat = false; }; };
-        kernel = { varient = "cachyos"; patches = [ "cjktty" "hibernate-progress" ]; };
+        kernel.patches = [ "cjktty" "hibernate-progress" ];
        networking.hostname = "pc";
        sysctl.laptop-mode = 5;
+        gui.enable = true;
      };
      hardware =
      {
--- a/devices/pc/secrets/default.yaml
+++ b/devices/pc/secrets/default.yaml
@@ -44,8 +44,8 @@ sops:
            OUlxNjdQaXdXMkZ6bnV1ek4yZ2dpbkEKpKGOAxo5Eef2jtGrg4iSzmGCeg+vTgvu
            +K8b+O19MIkGMDBm6UbYUPtc/7eqoEZRiTUzNMTmfkLVS4ul5zou9A==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-08T08:13:10Z"
-    mac: ENC[AES256_GCM,data:44e5uZrJ25aRlrSUlbakyWpqhloyGBjJhHXCJBVBJKi0OKn+QPluS0exBvNhTERhFmGk9qHwiIvjbAbplpg+83/IIcXd3NGxekEhwSAXS5Z+AMGIJ4AMet1SSwP6n8fOiI52hCFFRNJj66MyqKXFrNNye4/DF5Bh0dvXQDQbjSQ=,iv:PHpQ/bGrjrBWCj74kKevBlAV08+SAfV9bXJ7hC4lVYc=,tag:ATLe+m8oYKR0im86UekPAA==,type:str]
+    lastmodified: "2024-04-18T13:48:02Z"
+    mac: ENC[AES256_GCM,data:upQaP/oOym+Wucwb+9o/nZSMfVrzWZvQigiGyZrWjZ4TehMxJt/v69z6bu/h63HzjHA9T5NbthQaJaPo7XmTI97AZS7Dm7kr0gS7P2K7fzdMZ0NAibZmFPIfBBjHykBh77MobVI4RkGuXfLv7yQxIK9ChxQNpLOHlGpOa59bz3w=,iv:0NN0y+7njKL3X8qHEfdCXqTDti+eXSau8FYi9JLutHw=,tag:4t1SiXjxqEUo04L9HXLVzw==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/devices/pcarm/default.nix
+++ b/devices/pcarm/default.nix
@@ -18,11 +18,9 @@ inputs:
        };
        grub.installDevice = "efi";
        networking = { hostname = "pcarm"; networkd = {}; };
-        binfmt.enable = false;
        nixpkgs.arch = "aarch64";
-        kernel.varient = "nixos";
+        kernel.variant = "nixos";
      };
-      packages.packageSet = "server";
      services.sshd = {};
    };
  };
--- a/devices/pi3b/default.nix
+++ b/devices/pi3b/default.nix
@@ -19,11 +19,9 @@ inputs:
        };
        grub.installDevice = "efi";
        networking = { hostname = "pi3b"; networkd = {}; };
-        binfmt.enable = false;
        nixpkgs.arch = "aarch64";
-        kernel.varient = "nixos";
+        kernel.variant = "nixos";
      };
-      packages.packageSet = "server";
      services =
      {
        # snapper.enable = true;
--- a/devices/surface/default.nix
+++ b/devices/surface/default.nix
@@ -31,11 +31,12 @@ inputs:
        nixpkgs.march = "skylake";
        grub.installDevice = "efi";
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
-        kernel.patches = [ "cjktty" "lantian" "surface" ];
+        kernel = { variant = "xanmod-lts"; patches = [ "cjktty" "lantian" "surface" ]; };
        networking.hostname = "surface";
+        gui.enable = true;
      };
      hardware = { cpus = [ "intel" ]; gpu.type = "intel"; };
-      packages.packageSet = "desktop-fat";
+      packages.packageSet = "desktop-extra";
      virtualization = { docker.enable = true; waydroid.enable = true; };
      services =
      {
--- a/devices/vps4/default.nix
+++ b/devices/vps4/default.nix
@@ -0,0 +1,37 @@
+inputs:
+{
+  config =
+  {
+    nixos =
+    {
+      system =
+      {
+        fileSystems =
+        {
+          mount =
+          {
+            btrfs =
+            {
+              "/dev/disk/by-uuid/24577c0e-d56b-45ba-8b36-95a848228600"."/boot" = "/boot";
+              "/dev/mapper/root" = { "/nix" = "/nix"; "/nix/rootfs/current" = "/"; };
+            };
+          };
+          swap = [ "/nix/swap/swap" ];
+          rollingRootfs = {};
+        };
+        grub.installDevice = "/dev/disk/by-path/pci-0000:00:05.0-scsi-0:0:0:0";
+        nixpkgs.march = "znver2";
+        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
+        initrd.sshd.enable = true;
+        networking = { hostname = "vps4"; networkd = {}; };
+      };
+      services =
+      {
+        snapper.enable = true;
+        sshd = {};
+        fail2ban = {};
+        beesd.instances.root = { device = "/"; hashTableSizeMB = 64; };
+      };
+    };
+  };
+}
--- a/devices/vps4/secrets.yaml
+++ b/devices/vps4/secrets.yaml
@@ -0,0 +1,84 @@
+acme:
+    cloudflare.ini: ENC[AES256_GCM,data:X1v1QuOZemIuxldd1bzIvbUsq+8HMGLh91zUB+fnrxaW40z0OQh9L1rF/0Nj3gmUmgT4KEV7nkHFYYpZBp4/Kyc=,iv:fQmbhx9wV3l+DVPaBrAyJbTCsS3q3s5F9Go1F7pZ2pQ=,tag:P4vuruX460YSOUsx6zGHXQ==,type:str]
+frp:
+    token: ENC[AES256_GCM,data:T8b1ku4HNCNSJ+33QgIt1GILFA4wTu3Qd0rDqHPVgdqsGo0R90k0u8z+dElSO7q9PapTqUbZ,iv:hwnMu6JxfYLgw4TyhujX5dI2IAytgZh+Bexhgta6ATQ=,tag:lqgwvXlS/jGPxasmk5Vh3w==,type:str]
+xray-server:
+    clients:
+        #ENC[AES256_GCM,data:DXEC,iv:SZ1AhmK6fWQ/HGDk97kDUcRN84zQMp99eiz4SpRhig8=,tag:Fkdf28ZvB8XKCxSYdjuuHw==,type:comment]
+        user0: ENC[AES256_GCM,data:rJ00sfe/oJSry6Ixn4Bn+p41syqsOrdWv6fRGVCwPvn/unMY,iv:htTvFMvhIRkORA/gIU8J7CgA+tOncYQWh7sUh+F6XDs=,tag:VrSJBD7ti9WtSLHoWjMClw==,type:str]
+        #ENC[AES256_GCM,data:OVgDU+zqcQ==,iv:8KuEqBuL5Ca6pUOFFA+vySJx/h3BhGAAC0CgnxiW46o=,tag:TY1MajSSy2RjKVI2SSAAFw==,type:comment]
+        user1: ENC[AES256_GCM,data:S3IHO9FcVHTJOsRxjSohM9MgnrEwLdDpFU+efLkQaXT2jNJG,iv:KOesvPzjDfm1EDLFiegbk0wgjp7di5mUwUuuY2hwvOQ=,tag:ZsYyUyyEhO5S3weCw/gPMw==,type:str]
+        #ENC[AES256_GCM,data:OQOPobpbbhajgA==,iv:4jG3bHKzWcR+JnvSlJsc0Qlv5kywqVN5UE96J31CP7Q=,tag:P+jJkRxPu99tLXyO5k6dRA==,type:comment]
+        user2: ENC[AES256_GCM,data:e7ITe2ZouKr8dXT7SYATyzbzHaVeu6AKt1OcQKk3U0nsQgoa,iv:UbOOuojy6OAFEH8lGhKe5Hs+2K6FX5MZ8Br9AB007gs=,tag:5XeB4YngzTcHZvCpXe/ZXA==,type:str]
+        #ENC[AES256_GCM,data:93BxR0AEdQ==,iv:rf69GWpuxYt7fu1Fyv55pynuQDhi+TA5CwZK3cc3yBo=,tag:/hLy6atNMxLw6G3/qgMM4g==,type:comment]
+        user3: ENC[AES256_GCM,data:r+6jXaIj4HJoYLnJcnjJB+WEZlGaoSy/ktc1Aw77hFtNrrGp,iv:P+YUKns1yaOZokH5WkDB0jssGyHg3ncc54tF1PyA7Oc=,tag:/pxMEr7l4ye5EDAOsllxJA==,type:str]
+        #ENC[AES256_GCM,data:4gqZh391hg==,iv:No22DrD6EBs2FA4/qH8msWEjs20fc+ZpEeZep+HIv+c=,tag:aHrYNbI83POI4PRj1nd+Yw==,type:comment]
+        user4: ENC[AES256_GCM,data:ujiml/r4aFiKOkSJkaD/KE8rKuBtLSnpZREBH3vRJUzDT0QM,iv:a3VFlXpMLNFihvFa7gloANtHmBLg4szTL5LTm8E2kNs=,tag:W9KZ1GAVx9IBKfda7Zedng==,type:str]
+        #ENC[AES256_GCM,data:PTYBkBHs16U=,iv:qr3u7OveM1CmTBIf9gZK4fTRuLCpcZCwf8jmnd1L3Co=,tag:w3O41NG7yCwCVqPGh/6SXA==,type:comment]
+        user5: ENC[AES256_GCM,data:iDuLRb4dhLUOjpamioMwoTYrn7Cy+Ln4SaedVXkwVD05rjJ0,iv:AqzBBvLpJuIJCUJq0IyDcHrlqb0e84nQC0c94Rj85uw=,tag:0xou1i/iwAxGngO74OIMXg==,type:str]
+        #ENC[AES256_GCM,data:D5xiJW0Oyg==,iv:9a/6myiT9Crf/fff6ZkXj/obW2k95cABUNqQdPmcwcc=,tag:chs8BA8YtVkM9m3Ey9ETlA==,type:comment]
+        user6: ENC[AES256_GCM,data:YzLlf37SxKmU1/QA7gUIJsGid3KZNoAGOew8xR7cmw5l8ZmX,iv:SfKubo2jfjtxKn9odDiokMEZyPFfYZ/wwyYtBrgvgmM=,tag:+hxwIU5uBhzQyrKX4r3oiw==,type:str]
+        #ENC[AES256_GCM,data:8FxApg==,iv:vPa5p3QVHAvw+ECusWGqx1ugTcHh42CVFDQcMhG59wM=,tag:lHiZtydcYFBQiXnWh8pCrw==,type:comment]
+        user7: ENC[AES256_GCM,data:H/jje9ONEY6XuBXTZmTVGIcWUgGSMf5OB1NNRPtqGCgRP1ei,iv:xew+0BkRqz3nfOoBXTPbBv5hRczy/3tgYSKq432q4iw=,tag:da2ljcffiCVJCsMZaNPZyQ==,type:str]
+        #ENC[AES256_GCM,data:QdaYYH3RGJ4qIg==,iv:79NBTEKCPtgVVv3G7wg+vdoLOWxc+bdqT1lF4HJpTC8=,tag:8mRFGjy7lBrdyGyX9vaSOQ==,type:comment]
+        user8: ENC[AES256_GCM,data:H1gPtqF8vryD0rVH7HYzpMuZ3lufOBYczKwaTr4PidQtTyQK,iv:wh7NwFc/1ogNrnTTpm5L9dBqDVkvWiIsJZelR2mtR4Q=,tag:oEFdMFZJ9UYhsSVdefJ4rg==,type:str]
+        #ENC[AES256_GCM,data:aYWIiLxs1UvupQ==,iv:AisokHuAzD5B6fEF6ak8WfAe151CM3a8MsaWC4uJPnw=,tag:cdk5S4n9ulyWrqsD+jcqYg==,type:comment]
+        user9: ENC[AES256_GCM,data:HVK9KvGfOcwn1joc3VrkjBjE6hrxQPOBD5RTtQUgBPepToh6,iv:VK9aQ64L/GajpledBxC8PNB1BdNYEqwcdL3GKttgxvs=,tag:O/piztCYBARtAFxTMNXGaA==,type:str]
+        #ENC[AES256_GCM,data:b839t/OihMOmz0gIcTo43r2MIw==,iv:8kaAFG7DhFOoitcvbFaAvE1NUSLFrFhy1KiMrqs4r/c=,tag:G4vSADa52ZfN5y5ytoFJoQ==,type:comment]
+        user10: ENC[AES256_GCM,data:xjVkr/wy7OxRuNZKfQagfNxdVxTEyQP1ZhnR6jHy2gjBQ0RD,iv:G6iOBCHOqlvfEENY/ega/TUm81wgT2OOdZKZ6bPfg9o=,tag:p8AMa3bGsIl0hWQ09lSzgA==,type:str]
+        #ENC[AES256_GCM,data:+s3MMeNU5Q==,iv:CUrg+nNxCpJFbHQmMNXmSE+JcZK6Dfu8cGwtznx3CFY=,tag:G5CYMtao+hz3hs0fPVPmcw==,type:comment]
+        user11: ENC[AES256_GCM,data:BIZ2zRgGv5/9AexiZZvu+m4A62YUWtAkjWWMu89GteqpWMBq,iv:13IJcDf18LjoxJk7uoKnuFZT6Ihxrxsy7DBaAaiFqus=,tag:RN7wj+uPneCkqNlMRyYrXw==,type:str]
+        #ENC[AES256_GCM,data:spyQkQIHwg==,iv:7+0DUK95MPH7lpr+GMbbLu4/5yA11/4gTuLhQKlStfE=,tag:G/gIXML8UhYoCi9FfoTvSA==,type:comment]
+        user12: ENC[AES256_GCM,data:FAF9lXOzXW9CrZgnQ1a2+E8snZj2+JHqP5Gny92k09o/Wzga,iv:/qZuAtFmUQE7A9lMzJUoCvGx+3Sv9Ioh2ahch3puaC4=,tag:urwbLwGkSX3e85NCjyPhhg==,type:str]
+        #ENC[AES256_GCM,data:HueqiREBet2bxQ==,iv:WCjTAGg2gXgBSvY3zc/YyB/1X0XjvphPduVXLsjOwH8=,tag:wC+On6lyyYQ1Dt/BHDvONw==,type:comment]
+        user13: ENC[AES256_GCM,data:ExbnvWDIBqga5+k2mpoT8AKBOXAvUNMjBTPXUKrmtWzz4l+L,iv:UI7CvSx2FHYGf6BEHS4e3iwHZZWkl2Zt5xg2WdKbLvY=,tag:ad0c7YW2Bxo+Dn+BoSZ0Ng==,type:str]
+        #ENC[AES256_GCM,data:R8lN5T0=,iv:FXLf8Vtjg+PkwNhxXWDViMKqwn7tFMaPhio9zhnudZw=,tag:34gxRH+P9lmkUxlOPKcYMg==,type:comment]
+        user14: ENC[AES256_GCM,data:dgNPPlJD5JOFPbKhlvlRHBLmUNKeDm/JAiawUVpBE7H07Box,iv:w+t9BkqYvlxVKr+x0MwtBz0/YSR/7z1OnZLIoPdW4gc=,tag:CR3GLbaO0jSQgA2HuwzRqg==,type:str]
+    telegram:
+        token: ENC[AES256_GCM,data:xsJoGgQ8pLeZqA2alGKkCyrvnjY6rVF5TlXn4GWDrStFBl65XXzwVY/9ZZthYQ==,iv:qTLfpRUyuIGFM668URfknhSRtx3WEHp/WTGzGUPuFd4=,tag:p8mF0tM+t02g7v2EQZN3Vg==,type:str]
+        chat: ENC[AES256_GCM,data:X1JxFQw0bPCu,iv:hf+TOSH2p9RdnXDFKxTpSRzxDLdJyzNHVV8MfOQuGWY=,tag:iiWw9IFiBGOOyOSl9Jj2wQ==,type:str]
+    private-key: ENC[AES256_GCM,data:ts/LRGFAsYqvGvkvlxUI42IW1a8cGsSkpZhMDd3QVceRKvhPb1SRDaXoSw==,iv:6xX9xFIFUNlLBZ6CPBOz9JbHpvC4+QG9ZaCZcWdl12c=,tag:DYIa+QTV8vyl1l7OKKykTw==,type:str]
+nginx:
+    #ENC[AES256_GCM,data:85LrqdTMIhSa,iv:mIQPYz8VPd5AxeMCQEdTGMD0Iqa5QEAa5+8JVFaj3JM=,tag:TcZd7S3WRPpEV9lHI1fzbw==,type:comment]
+    #ENC[AES256_GCM,data:rVTLpe3uIQ5LArPnEY8N8kjtHq8kZddbqR+nyUaia72Y7PWEfHzy6wgx3Q==,iv:AZEufH3zfVL0XbUh3CQZGYcx6zIMFV4tF+jHf73IplU=,tag:B/UbtQh5dGrctNih2uoO8w==,type:comment]
+    #ENC[AES256_GCM,data:InzwjKl3R4SJSXTz5u1Pt0kf2HYEtKfSkJO0cbPhhXADNp2/Tn0nwQJFy9EzpMvK9mw8+l5LadbY0tIwmTVvV5yxUQo78HcgXWInfp/zJ+GG1L/RQOHck74lEA==,iv:UBMRYPd0loOQBs3mNyndiKPu72aRA8HbOKWDfUWPQg8=,tag:t/ONqdwpWcbo/2vy5TOjlA==,type:comment]
+    #ENC[AES256_GCM,data:HTinhnsAbVujUOuLIVT/CkvdtTN9Nk7wZKZ5SyrPC+vZ/cB9E10FffMYLQ==,iv:Clby9A7MIUSknNFkzKuWEDL0yUW/ctd6KShCIEYrDZA=,tag:CJKORoXrspDjRmaSHUnlqw==,type:comment]
+    #ENC[AES256_GCM,data:cwAb68VgebTwCCeAFUbOG0CUAuggfRnLNv9NWldJN+E9NY4WKxs12Nz7yX/vtelcqqJ2TOUL78uAR88Nzavv7VtCTZRivWjRG6GvAUyRdv8lAZo=,iv:PScTSTCuVnsoZlvyTVL+ZgqqEm4m2/fUqWzPwE+PvuY=,tag:1jeRsHqgMheXbcnhRicsnw==,type:comment]
+    #ENC[AES256_GCM,data:V5XRrTvyeezkcJqw1/BhhZz5K/egpl+PtNwjAGELjWRp7IqDfRsInxBKEg==,iv:LdOTkL22HvaNbiUi6hG8o0ownfZ22OKFGxCuGPqG8xU=,tag:/06I/mLzBlgS489iuwFTuw==,type:comment]
+    #ENC[AES256_GCM,data:i9PXzaO1od7HimP/6vxYfh30SxFbdXRDcnXujH3VrvngFcWaVcXgigncp3cboi6RoERSZ6yakxviVyEBIS4v0qRfombj2UtJg8N3Kg==,iv:aohIMhAYfZhlGDrcEvi+Qc16nF8ZgrPUGhWj/7nl8Fs=,tag:o70qsk/2cAbZgbVBwfl3Ew==,type:comment]
+    maxmind-license: ENC[AES256_GCM,data:sESU6uK9EYLido9/0sXO2Zw1SjuKmxPh4r3giJcaG7068gn1kByjsA==,iv:htnFgnLrH35zSvmlRAdoRDLFIpKroKO5dW9TNK9soUc=,tag:6pJuc54SrKP5n0kJJ7fGyA==,type:str]
+send:
+    redis-password: ENC[AES256_GCM,data:6zVKw9AmKwSWvHUZhzy0F2KcJW96uFoZY/N1Zq8ilUJOLZeX,iv:viwLIgJz9v8oadr8784OgETbEsxzGsJvVoxmOwWEFxo=,tag:XEYFnoCGwlnrkqaUbgeH+Q==,type:str]
+coturn:
+    auth-secret: ENC[AES256_GCM,data:50KqO4GQ1ERbCnK4IjYu6aywT+IPMtVlTzh/TE4MwWApU4pO9yqz25ENGUAKRLi4p+Ecug+Rn3InRl1b+q6bAQ==,iv:SgHkHvHg/+yA1Z5E9effgCnZMVXv5amGNUsVKErai54=,tag:PoYLV9Xr0IXXsA39n7wiTQ==,type:str]
+wireguard:
+    privateKey: ENC[AES256_GCM,data:4DKPPqQkjb33rQzFIz863A2arDRQA9AivWFBaWTf0xXDX4hWvJFiIlJQfvE=,iv:0R2TH3CMxHgwVjojzjE2Gnp8SXonmBDLWF7hB33NiX0=,tag:vgtV8JkuCdspleN/SvgIqQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age19ax6vm3pv8rph5tq3mmehd9sy9jk823tw8svsd790r0lkslycquqvlwz9m
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1QXc4NzREZHlhMDV2WXlM
+            a2I4d1pjWm9Xd2gzUDUwZ1ZSTkFGR1ZQNDJzCmJwcWFxRWNNVGxTNno2b1NxNktO
+            aHhINXBjdmE3alFGYk9kUHZ1UzdJUk0KLS0tIFdKMDlvb1Z2Qi8xRjl0MXpKMDMz
+            cVVNdDRDNmtHZlJEcVRXR1FLVkZrMWcKn2iTHH7/52fJNXcbDFbzOxNAaiQRA0nO
+            we74EeNzcaaQwuEmBQPKxd/g7/kjhnHzTkoX3OneXMd/gBZMn2knXw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age164tyqklwhdm57tfm5u863mdt2xrzrrzac4py8a0j9y6kzqcjy9zsp073t6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycEw1bXA4QUZkUzJ0Z3pM
+            Z0xHam5SLzRGV21XYUtxTFh1VnhQUk1NbzAwCkU1Z3VTR1FtZ05GOWNDOENlZTgz
+            SitzYXo2Q2VEaGtLTGE2UGRoUDkxN28KLS0tIHhRS2Y1cnQreC9Fc2FLdGR1ZXdJ
+            ZXFTU3ZCaW1pTVh0RUJzdDdGdHlPYTgK2mlgcX2kEc8+2UDdBnhUm6IIuh8V6agW
+            ooxH9OEPXUVI/4JcDo4v8ZUhAyU1ehLH0Ef7PJCChOZe2KZmWSNbhA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-03-28T10:31:05Z"
+    mac: ENC[AES256_GCM,data:6Z+ltjbvQaYhDPoiCN7ajQeWcp6vj3TIcUXUm/r/tZU4mIOvfxA7hxW971b76bYPTeVwgp7ZB9qQy9emDHV9i+aSyJpTPKQHRRz5J+T+NJhTP/IL3R3VmG89ssC6NH8FSk0S487JkPd8tNz+G6bvwFCPRxRLNj1pXX0Dp6tgwIw=,iv:xLw2iX1ODAbJCTJ8fEvG7SdZ1GnGwADIckH8DibVM2Y=,tag:TTzlHdcyIQr/92ZHmViRXQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1
--- a/devices/vps6/default.nix
+++ b/devices/vps6/default.nix
@@ -31,10 +31,9 @@ inputs:
        initrd.sshd.enable = true;
        networking = { hostname = "vps6"; networkd = {}; };
      };
-      packages.packageSet = "server";
      services =
      {
-        snapper.enable = false;
+        snapper.enable = true;
        sshd = {};
        xray.server = { serverName = "vps6.xserver.chn.moe"; userNumber = 14; };
        frpServer = { enable = true; serverName = "frp.chn.moe"; };
--- a/devices/vps7/default.nix
+++ b/devices/vps7/default.nix
@@ -30,13 +30,10 @@ inputs:
        nix.substituters = [ "https://cache.nixos.org/" "https://nix-store.chn.moe" ];
        initrd.sshd.enable = true;
        networking = { hostname = "vps7"; networkd = {}; };
-        gui.preferred = false;
      };
-      packages.packageSet = "desktop";
      services =
      {
        snapper.enable = true;
-        fontconfig.enable = true;
        sshd = {};
        rsshub.enable = true;
        wallabag.enable = true;
@@ -47,7 +44,6 @@ inputs:
          synapse.matrixHostname = "synapse.chn.moe";
          matrix = { port = 8009; redisPort = 6380; slidingSyncPort = 9001; };
        };
-        xrdp = { enable = true; hostname = [ "vps7.chn.moe" ]; };
        vaultwarden.enable = true;
        beesd.instances.root = { device = "/"; hashTableSizeMB = 1024; };
        photoprism.enable = true;
--- a/devices/vps7/secrets.yaml
+++ b/devices/vps7/secrets.yaml
@@ -131,8 +131,8 @@ sops:
            SnFHS1Z0SXUzTFdEd29KTy9DU3Y3R0UKfhh+rUmWDrf+UGjclP57dHipPLFoXSqy
            HdelmfV6q4/c7ppx2E+oZw3VNgoZCsrxxzYZfwxHJiZb+5vkE0D8iA==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-04-08T08:12:57Z"
-    mac: ENC[AES256_GCM,data:o+T7o5Z/8JIoS/a3iqFe8CphZzwgQl3RlalGMFE9YEprLUuXLwL4IioU7Q1WKHTS+ih1Q1oCye/7363njewo+8PZq+BbJXOP+cSpoSUflsfyGymxgdQk2vo308TTvCXuHJobVqtxPd2QLUzvCpEXuatUWmxbmJNpSFO+kEvM3qU=,iv:YUUST05szM5BII4SaO8vRm7prS5L5MJJJuecRL5sLUM=,tag:K0NRXtDcn2poi5I7QCl50w==,type:str]
+    lastmodified: "2024-04-18T13:48:22Z"
+    mac: ENC[AES256_GCM,data:LjUMKJBWlNb/7s2VfFQATmRNPpmP0w7wZ+/7R2rpeH/1rTUH7ee3f3tutHijF1MnFjx1Z22iGC0jW/P9VBedKSETJBhQQ9lHZDqr7dzr+InbnYQ1sCt2LnLBu1m7bACgOxh9xr9v8pGIj9UdW+9gMhpSIB5r8h6/cIuBiO/7eqs=,iv:d0qj6vZSHoeuZNsLCzAJ6Ono4Mqf01SWkygItkP5Vco=,tag:CAQ2O6/86Smc77qrfcU7Xg==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.8.1
--- a/devices/xmupc1/README.md
+++ b/devices/xmupc1/README.md
@@ -186,22 +186,21 @@ samba 就是 windows 共享文件夹的那个协议。

 VASP 有很多很多个版本，具体来说：

-* VASP 多个版本可以共存。目前安装了两个版本：6.3.1 和 6.4.0。
-* VASP 可以用不同的编译器编译。目前安装的有：nvidia、gnu、intel 和 amd。nvidia 使用 GPU 计算，其它的只能用 CPU 计算。
+* VASP 多个版本可以共存，但为了简单只安装了 6.4.0 版本。
+* VASP 可以用不同的编译器编译。目前安装的有：nvidia、intel。nvidia 使用 GPU 计算，intel 能用 CPU 计算。其它版本性能不佳，没有安装。
 * VASP 的 std/gam/ncl 版本有一点区别，一般用 std，只有一个 gamma 点的时候用 gam 会快一点，系统中存在方向不平行的磁矩时必须用 ncl。
 * 无论哪个版本，都集成了下面这些补丁：
  * HDF5：用于生成 hdf5 格式的输出文件。
  * wannier90：我也不知道干啥的，随手加上的。
  * OPTCELL：如果存在一个 `OPTCELL` 文件，VASP 会据此决定弛豫时仅优化哪几个晶胞参数。
  * MPI shared memory：用来减小内存占用。
+  * VTST tools：用来计算 neb。

 如何提交 VASP 到队列系统已经在上面介绍过了。下面的例子是，如果要直接运行一个任务的写法：

 ```bash
 vasp-nvidia-640-env mpirun -np 1 -x CUDA_DEVICE_ORDER=PCI_BUS_ID -x CUDA_VISIBLE_DEVICES=0 -x OMP_NUM_THREADS=4 vasp-std
-vasp-gnu-640-env mpirun -np 2 -x OMP_NUM_THREADS=4 vasp-std
 vasp-intel-640-env mpirun -n 2 -genv OMP_NUM_THREADS=4 vasp-std
-vasp-amd-640-env mpirun -np 2 -x OMP_NUM_THREADS=4 vasp-std
 ```

 其中 `CUDA_VISIBLE_DEVICES` 用于指定用哪几个显卡计算（多个显卡用逗号分隔）。
@@ -211,6 +210,12 @@ vasp-amd-640-env mpirun -np 2 -x OMP_NUM_THREADS=4 vasp-std
  后面的 `mpirun xxx` 才是真的调用 VASP。
 所以实际上你也可以在这个环境里做别的事情，例如执行上面的 `nvaccelinfo` 命令。

+要使用 VTST tools 里带的脚本，需要在命令前加上 `vtstscripts` 。例如：
+
+```bash
+vtstscripts dist.pl POSCAR.init POSCAR.final
+```
+
 ## mumax

 问龚斌，我没用过。
--- a/devices/xmupc1/default.nix
+++ b/devices/xmupc1/default.nix
@@ -47,8 +47,7 @@ inputs:
            forwardCompat = false;
          };
        };
-        gui = { preferred = false; autoStart = true; };
-        kernel.patches = [ "cjktty" "lantian" ];
+        gui = { enable = true; preferred = false; autoStart = true; };
        networking.hostname = "xmupc1";
        nix.remote.slave.enable = true;
      };
--- a/devices/xmupc2/default.nix
+++ b/devices/xmupc2/default.nix
@@ -41,8 +41,7 @@ inputs:
            forwardCompat = false;
          };
        };
-        gui = { preferred = false; autoStart = true; };
-        kernel.patches = [ "cjktty" "lantian" ];
+        gui = { enable = true; preferred = false; autoStart = true; };
        networking.hostname = "xmupc2";
        nix.remote.slave.enable = true;
      };
--- a/flake.lock
+++ b/flake.lock
--- a/flake.nix
+++ b/flake.nix
@@ -3,6 +3,7 @@

  inputs =
  {
+    # TODO: add color scheme
    nixpkgs.url = "github:CHN-beta/nixpkgs/nixos-23.11";
    nixpkgs-unstable.url = "github:CHN-beta/nixpkgs/nixos-unstable";
    "nixpkgs-23.05".url = "github:CHN-beta/nixpkgs/nixos-23.05";
@@ -18,7 +19,11 @@
    nix-index-database = { url = "github:Mic92/nix-index-database"; inputs.nixpkgs.follows = "nixpkgs-unstable"; };
    nur.url = "github:nix-community/NUR";
    nixos-cn = { url = "github:nixos-cn/flakes"; inputs.nixpkgs.follows = "nixpkgs"; };
-    nur-xddxdd = { url = "github:xddxdd/nur-packages"; inputs.nixpkgs.follows = "nixpkgs"; };
+    nur-xddxdd =
+    {
+      url = "github:xddxdd/nur-packages?rev=404bc382a29f3d78b03871b96016579d6a0aa305";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
    nix-vscode-extensions = { url = "github:nix-community/nix-vscode-extensions"; inputs.nixpkgs.follows = "nixpkgs"; };
    impermanence.url = "github:nix-community/impermanence";
    qchem = { url = "github:Nix-QChem/NixOS-QChem/release-23.11"; inputs.nixpkgs.follows = "nixpkgs"; };
@@ -40,10 +45,13 @@
    nix-flatpak.url = "github:gmodena/nix-flatpak";
    chaotic =
    {
-      url = "github:chaotic-cx/nyx?rev=03b2bea544688068025df1912ff1e9a1ad4a642a";
+      url = "github:chaotic-cx/nyx";
      inputs = { nixpkgs.follows = "nixpkgs"; home-manager.follows = "home-manager"; };
    };
+    # TODO: pick it from nixpkgs
+    nix-inspect.url = "github:bluskript/nix-inspect";
    gricad = { url = "github:Gricad/nur-packages"; flake = false; };
+    catppuccin.url = "github:catppuccin/nix";

    misskey = { url = "git+https://github.com/CHN-beta/misskey?submodules=1"; flake = false; };
    rsshub = { url = "github:DIYgod/RSSHub"; flake = false; };
@@ -61,13 +69,15 @@
    win11os-kde = { url = "github:yeyushengfan258/Win11OS-kde"; flake = false; };
    fluent-kde = { url = "github:vinceliuice/Fluent-kde"; flake = false; };
    rycee = { url = "gitlab:rycee/nur-expressions"; flake = false; };
-    blurred-wallpaper = { url = "github:bouteillerAlan/blurredwallpaper"; flake = false; };
+    blurred-wallpaper =
+      { url = "github:bouteillerAlan/blurredwallpaper?rev=aecc88d43e458a0962a0091dcdb7baac34e263be"; flake = false; };
    slate = { url = "github:TheBigWazz/Slate"; flake = false; };
    linux-surface = { url = "github:linux-surface/linux-surface"; flake = false; };
    lepton = { url = "github:black7375/Firefox-UI-Fix"; flake = false; };
    lmod = { url = "github:TACC/Lmod"; flake = false; };
    mumax = { url = "github:CHN-beta/mumax"; flake = false; };
    kylin-virtual-keyboard = { url = "git+https://gitee.com/openkylin/kylin-virtual-keyboard.git"; flake = false; };
+    cjktty = { url = "github:zhmars/cjktty-patches"; flake = false; };
  };

  outputs = inputs:
--- a/local/pkgs/default.nix
+++ b/local/pkgs/default.nix
@@ -57,9 +57,9 @@ inputs: rec
      hdf5 = inputs.pkgs.hdf5.override { mpiSupport = true; fortranSupport = true; };
    };
    nvidia = inputs.pkgs.callPackage ./vasp/nvidia
-      { inherit lmod nvhpc wannier90 additionalCommands; hdf5 = hdf5-nvhpc; };
+      { inherit lmod nvhpc wannier90 additionalCommands vtst; hdf5 = hdf5-nvhpc; };
    intel = inputs.pkgs.callPackage ./vasp/intel
-      { inherit lmod oneapi wannier90 additionalCommands; hdf5 = hdf5-oneapi; };
+      { inherit lmod oneapi wannier90 additionalCommands vtst; hdf5 = hdf5-oneapi; };
    amd = inputs.pkgs.callPackage ./vasp/amd
      { inherit aocc aocl wannier90 additionalCommands; hdf5 = hdf5-aocc; openmpi = openmpi-aocc; gcc = gcc-pie; };
    wannier90 = inputs.pkgs.callPackage
@@ -73,7 +73,10 @@ inputs: rec
      { configureFlags = prev.configureFlags ++ [ "--enable-default-pie" ];}));
    additionalCommands = let uid = inputs.config.nixos.user.uid.gb; in
      ''[ "$(${inputs.pkgs.coreutils}/bin/id -u)" -eq ${builtins.toString uid} ] && exit 1'';
+    vtst = (inputs.pkgs.callPackage ./vasp/vtst.nix {});
+    vtstscripts = inputs.pkgs.callPackage ./vasp/vtstscripts.nix {};
  };
+  # TODO: use other people packaged hpc version
  oneapi = inputs.pkgs.callPackage ./oneapi {};
  mumax = inputs.pkgs.callPackage ./mumax { src = inputs.topInputs.mumax; };
  aocc = inputs.pkgs.callPackage ./aocc {};
--- a/local/pkgs/nvhpc/default.nix
+++ b/local/pkgs/nvhpc/default.nix
@@ -39,5 +39,5 @@ in stdenvNoCC.mkDerivation
    mkdir -p $out
    ${builder}/bin/builder ./install
  '';
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/oneapi/default.nix
+++ b/local/pkgs/oneapi/default.nix
@@ -86,5 +86,5 @@ in stdenvNoCC.mkDerivation rec
      --ignore-latest
  '';
  dontFixup = true;
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/vasp/amd/default.nix
+++ b/local/pkgs/vasp/amd/default.nix
@@ -48,7 +48,7 @@ let
      for i in std gam ncl; do cp bin/vasp_$i $out/bin/vasp-$i; done
    '';
    dontFixup = true;
-    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
  };
  startScript = version: writeScript "vasp-nvidia-${version}"
  ''
--- a/local/pkgs/vasp/hdf5-aocc/default.nix
+++ b/local/pkgs/vasp/hdf5-aocc/default.nix
@@ -42,5 +42,5 @@ in stdenvNoCC.mkDerivation
  '';
  dontInstall = true;
  dontFixup = true;
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/vasp/hdf5-nvhpc/default.nix
+++ b/local/pkgs/vasp/hdf5-nvhpc/default.nix
@@ -36,5 +36,5 @@ in stdenvNoCC.mkDerivation
  '';
  dontInstall = true;
  dontFixup = true;
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/vasp/hdf5-oneapi/default.nix
+++ b/local/pkgs/vasp/hdf5-oneapi/default.nix
@@ -44,5 +44,5 @@ in stdenvNoCC.mkDerivation
  '';
  dontInstall = true;
  dontFixup = true;
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/vasp/intel/default.nix
+++ b/local/pkgs/vasp/intel/default.nix
@@ -1,7 +1,7 @@
 {
  buildFHSEnv, writeScript, stdenvNoCC, requireFile, substituteAll, symlinkJoin, writeTextDir,
  config, oneapiArch ? config.oneapiArch or "SSE3", additionalCommands ? "",
-  oneapi, gcc, glibc, lmod, rsync, which, wannier90, binutils, hdf5, zlib
+  oneapi, gcc, glibc, lmod, rsync, which, wannier90, binutils, hdf5, zlib, vtst
 }:
 let
  sources = import ../source.nix { inherit requireFile; };
@@ -31,10 +31,14 @@ let
    pname = "vasp-intel";
    inherit version;
    src = sources.${version};
+    patches = [ ../vtst.patch ];
    configurePhase =
    ''
      cp ${include version} makefile.include
+      chmod +w makefile.include
      cp ${../constr_cell_relax.F} src/constr_cell_relax.F
+      cp -r ${vtst version}/* src
+      chmod -R +w src
    '';
    nativeBuildInputs = [ rsync which ];
    HDF5_ROOT = hdf5;
@@ -46,7 +50,7 @@ let
      for i in std gam ncl; do cp bin/vasp_$i $out/bin/vasp-$i; done
    '';
    dontFixup = true;
-    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
  };
  startScript = { version, variant }: writeScript "vasp-intel-${version}"
  ''
--- a/local/pkgs/vasp/nvidia/default.nix
+++ b/local/pkgs/vasp/nvidia/default.nix
@@ -1,7 +1,7 @@
 {
  buildFHSEnv, writeScript, stdenvNoCC, requireFile, substituteAll, symlinkJoin,
  config, cudaCapabilities ? config.cudaCapabilities, nvhpcArch ? config.nvhpcArch or "px", additionalCommands ? "",
-  nvhpc, lmod, mkl, gfortran, rsync, which, hdf5, wannier90, zlib
+  nvhpc, lmod, mkl, gfortran, rsync, which, hdf5, wannier90, zlib, vtst
 }:
 let
  sources = import ../source.nix { inherit requireFile; };
@@ -31,10 +31,14 @@ let
    pname = "vasp-nvidia";
    inherit version;
    src = sources.${version};
+    patches = [ ../vtst.patch ];
    configurePhase =
    ''
      cp ${include version} makefile.include
+      chmod +w makefile.include
      cp ${../constr_cell_relax.F} src/constr_cell_relax.F
+      cp -r ${vtst version}/* src
+      chmod -R +w src
    '';
    enableParallelBuilding = true;
    buildInputs = [ mkl hdf5 wannier90 ];
@@ -49,7 +53,7 @@ let
      for i in std gam ncl; do cp bin/vasp_$i $out/bin/vasp-$i; done
    '';
    dontFixup = true;
-    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+    requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
  };
  startScript = { version, variant }: writeScript "vasp-nvidia-${version}"
  ''
--- a/local/pkgs/vasp/openmpi-aocc/default.nix
+++ b/local/pkgs/vasp/openmpi-aocc/default.nix
@@ -41,5 +41,5 @@ in stdenvNoCC.mkDerivation
  postBuild = with openmpi; postInstall + postFixup;
  dontInstall = true;
  dontFixup = true;
-  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" "big-parallel" ];
+  requiredSystemFeatures = [ "gccarch-exact-${stdenvNoCC.hostPlatform.gcc.arch}" ];
 }
--- a/local/pkgs/vasp/vtst.nix
+++ b/local/pkgs/vasp/vtst.nix
@@ -0,0 +1,9 @@
+{ fetchzip, lib }: version:
+  let
+    src = fetchzip
+    {
+      url = "http://theory.cm.utexas.edu/code/vtstcode-199.tgz";
+      sha256 = "06c9f14a90ka3p396q6spr25xwkih4n01nm1qjj9fnvqzxlp9k9y";
+    };
+    shortVersion = builtins.concatStringsSep "." (lib.lists.take 2 (builtins.splitVersion version));
+  in if version == null then src else "${src}/vtstcode${shortVersion}"
--- a/local/pkgs/vasp/vtst.patch
+++ b/local/pkgs/vasp/vtst.patch
@@ -0,0 +1,56 @@
+diff --color -ur /nix/store/wxa9k7aq7yw0b8rrcnvsmi8jq487x1lr-vasp-6.4.0/src/main.F /home/chn/Desktop/vasp/src/main.F
+--- a/src/main.F	1970-01-01 08:00:01.000000000 +0800
+++ b/src/main.F	2024-04-14 11:09:56.920197043 +0800
+@@ -965,7 +965,7 @@
+ ! init all chains (INCAR reader)
+ !-----------------------------------------------------------------------
+       LCHAIN = IMAGES > 0 .AND. .NOT.AFQMC_SET % ACTIVE
+-      IF (LCHAIN) CALL chain_init( T_INFO, IO)
+      CALL chain_init( T_INFO, IO)
+ !-----------------------------------------------------------------------
+ !xml finish copying parameters from INCAR to xml file
+ ! no INCAR reading from here
+@@ -3623,7 +3623,7 @@
+       ENDIF
+ 
+       CALL CHAIN_FORCE(T_INFO%NIONS,DYN%POSION,TOTEN,TIFOR, &
+-           LATT_CUR%A,LATT_CUR%B,IO%IU6)
+           TSIF,LATT_CUR%A,LATT_CUR%B,IO%IU6)
+ 
+       CALL PARALLEL_TEMPERING(NSTEP,T_INFO%NIONS,DYN%POSION,DYN%VEL,TOTEN,TIFOR,DYN%TEBEG,DYN%TEEND, &
+            LATT_CUR%A,LATT_CUR%B,IO%IU6)
+diff --color -ur /nix/store/wxa9k7aq7yw0b8rrcnvsmi8jq487x1lr-vasp-6.4.0/src/makefile /home/chn/Desktop/vasp/src/makefile
+--- a/src/makefile	1970-01-01 08:00:01.000000000 +0800
+++ b/src/makefile	2024-04-14 11:12:29.534219679 +0800
+@@ -14,7 +14,7 @@
+ OFLAG=$(OFLAG_2)
+ OFLAG_IN=$(OFLAG)
+ 
+-LIB=lib parser
+LIB=lib parser pyamff_fortran
+ LLIB=-Llib -ldmy -Lparser -lparser
+ 
+ SRCDIR=../../src
+@@ -146,7 +146,7 @@
+ 	$(MAKE) -C $@ -j1
+ #	$(MAKE) -C $@
+ 
+-dependencies: sources
+dependencies: sources libs
+ 	$(MAKE) depend
+ 
+ depend: $(F90SRC)
+diff --color -ur /nix/store/wxa9k7aq7yw0b8rrcnvsmi8jq487x1lr-vasp-6.4.0/src/.objects /home/chn/Desktop/vasp/src/.objects
+--- a/src/.objects	1970-01-01 08:00:01.000000000 +0800
+++ b/src/.objects	2024-04-14 11:10:56.879417040 +0800
+@@ -122,6 +122,10 @@
+ 	dos.o \
+ 	elf.o \
+ 	hamil_rot.o \
+	bfgs.o dynmat.o instanton.o lbfgs.o sd.o cg.o dimer.o bbm.o \
+	fire.o lanczos.o neb.o qm.o \
+	pyamff_fortran/*.o ml_pyamff.o \
+	opt.o \
+ 	chain.o \
+ 	dyna.o \
+ 	fileio.o \
--- a/local/pkgs/vasp/vtstscripts.nix
+++ b/local/pkgs/vasp/vtstscripts.nix
@@ -0,0 +1,24 @@
+{ fetchzip, stdenv, autoPatchelfHook, perl, writeScriptBin }:
+  let vtstscript-unwrapped = stdenv.mkDerivation
+  {
+    name = "vtstscript-unwrapped";
+    src = fetchzip
+    {
+      url = "http://theory.cm.utexas.edu/code/vtstscripts.tgz";
+      sha256 = "04476wgxvja15jijh9dxbzwy4mdrdqnd93s66jsm26rf73caj7lr";
+    };
+    buildInputs = [ autoPatchelfHook perl ];
+    installPhase =
+    ''
+      mkdir -p $out/lib/vtstscripts
+      cp -r * $out/lib/vtstscripts
+      patchShebangs $out/lib/vtstscripts
+    '';
+  };
+  in writeScriptBin "vtstscripts"
+  ''
+    # add vtstscript-unwrapped in PERL5LIB
+    export PERL5LIB=${vtstscript-unwrapped}/lib/vtstscripts''${PERL5LIB:+:$PERL5LIB}
+    export PATH=${vtstscript-unwrapped}/lib/vtstscripts''${PATH:+:$PATH}
+    exec "$@"
+  ''
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -15,6 +15,7 @@ inputs:
      topInputs.impermanence.nixosModules.impermanence
      topInputs.nix-flatpak.nixosModules.nix-flatpak
      topInputs.chaotic.nixosModules.default
+      topInputs.catppuccin.nixosModules.catppuccin
      (inputs:
      {
        config =
@@ -41,6 +42,7 @@ inputs:
          [
            topInputs.plasma-manager.homeManagerModules.plasma-manager
            topInputs.nix-doom-emacs.hmModule
+            topInputs.catppuccin.homeManagerModules.catppuccin
          ];
        };
      })
--- a/modules/hardware/default.nix
+++ b/modules/hardware/default.nix
@@ -1,14 +1,18 @@
 inputs:
 {
  imports = inputs.localLib.findModules ./.;
-  options.nixos.hardware = let inherit (inputs.lib) mkOption types; in
-  {
-    bluetooth = mkOption { type = types.nullOr (types.submodule {}); default = {}; };
-    joystick = mkOption { type = types.nullOr (types.submodule {}); default = {}; };
-    printer = mkOption { type = types.nullOr (types.submodule {}); default = {}; };
-    sound = mkOption { type = types.nullOr (types.submodule {}); default = {}; };
-    cpus = mkOption { type = types.listOf (types.enum [ "intel" "amd" ]); default = []; };
-  };
+  options.nixos.hardware =
+    let
+      inherit (inputs.lib) mkOption types;
+      default = if inputs.config.nixos.system.gui.enable then {} else null;
+    in
+    {
+      bluetooth = mkOption { type = types.nullOr (types.submodule {}); inherit default; };
+      joystick = mkOption { type = types.nullOr (types.submodule {}); inherit default; };
+      printer = mkOption { type = types.nullOr (types.submodule {}); inherit default; };
+      sound = mkOption { type = types.nullOr (types.submodule {}); inherit default; };
+      cpus = mkOption { type = types.listOf (types.enum [ "intel" "amd" ]); default = []; };
+    };
  config = let inherit (inputs.config.nixos) hardware; in inputs.lib.mkMerge
  [
    # bluetooth
--- a/modules/packages/chromium.nix
+++ b/modules/packages/chromium.nix
@@ -0,0 +1,39 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  {
+    programs.chromium = { enable = true; extraOpts.PasswordManagerEnabled = false; };
+    nixos.user.sharedModules =
+    [{
+      config.programs.chromium =
+      {
+        enable = true;
+        extensions =
+        # TODO: declartive way to install extensions, with fixed xpi file
+        # TODO: declartively config
+        [
+          { id = "mpkodccbngfoacfalldjimigbofkhgjn"; } # Aria2 Explorer
+          { id = "nngceckbapebfimnlniiiahkandclblb"; } # Bitwarden
+          { id = "kbfnbcaeplbcioakkpcpgfkobkghlhen"; } # Grammarly
+          { id = "ihnfpdchjnmlehnoeffgcbakfmdjcckn"; } # Pixiv Fanbox Downloader
+          { id = "cimiefiiaegbelhefglklhhakcgmhkai"; } # Plasma Integration
+          { id = "dkndmhgdcmjdmkdonmbgjpijejdcilfh"; } # Powerful Pixiv Downloader
+          { id = "padekgcemlokbadohgkifijomclgjgif"; } # Proxy SwitchyOmega
+          { id = "kefjpfngnndepjbopdmoebkipbgkggaa"; } # RSSHub Radar
+          { id = "abpdnfjocnmdomablahdcfnoggeeiedb"; } # Save All Resources
+          { id = "nbokbjkabcmbfdlbddjidfmibcpneigj"; } # SmoothScroll
+          { id = "onepmapfbjohnegdmfhndpefjkppbjkm"; } # SuperCopy 超级复制
+          { id = "cjpalhdlnbpafiamejdnhcphjbkeiagm"; } # uBlock Origin
+          { id = "gppongmhjkpfnbhagpmjfkannfbllamg"; } # Wappalyzer
+          { id = "hkbdddpiemdeibjoknnofflfgbgnebcm"; } # YouTube™ 双字幕
+          { id = "ekhagklcjbdpajgpjgmbionohlpdbjgc"; } # Zotero Connector
+          { id = "ikhdkkncnoglghljlkmcimlnlhkeamad"; } # 划词翻译
+          { id = "dhdgffkkebhmkfjojejmpbldmpobfkfo"; } # 篡改猴
+          { id = "hipekcciheckooncpjeljhnekcoolahp"; } # Tabliss
+          { id = "nkbihfbeogaeaoehlefnkodbefgpgknn"; } # MetaMask
+          { id = "bpoadfkcbjbfhfodiogcnhhhpibjhbnh"; } # 沉浸式翻译
+        ];
+      };
+    }];
+  };
+}
--- a/modules/packages/default.nix
+++ b/modules/packages/default.nix
@@ -8,15 +8,20 @@ inputs:
      [
        # no gui, only used for specific purpose
        "server"
+        "server-extra"
        # gui, for daily use, but not install large programs such as matlab
        "desktop"
-        "desktop-fat"
+        "desktop-extra"
        # nearly everything
        "workstation"
      ];
    in
    {
-      packageSet = mkOption { type = types.enum packageSets; default = "server"; };
+      packageSet = mkOption
+      {
+        type = types.enum packageSets;
+        default = if inputs.config.nixos.system.gui.enable then "desktop" else "server";
+      };
      extraPackages = mkOption { type = types.listOf types.unspecified; default = []; };
      excludePackages = mkOption { type = types.listOf types.unspecified; default = []; };
      extraPythonPackages = mkOption { type = types.listOf types.unspecified; default = []; };
@@ -35,32 +40,31 @@ inputs:
      _prebuildPackages = mkOption { type = types.listOf types.unspecified; default = []; };
    };
  config =
-    let
-      inherit (builtins) concatLists map;
-    in
-    {
-      environment.systemPackages = let inherit (inputs.lib.lists) subtractLists; in with inputs.config.nixos.packages;
-        (subtractLists excludePackages (_packages ++ extraPackages))
-        ++ [
-          (inputs.pkgs.python3.withPackages (pythonPackages:
-            subtractLists
-              (concatLists (map (packageFunction: packageFunction pythonPackages) excludePythonPackages))
-              (concatLists (map (packageFunction: packageFunction pythonPackages)
-                (_pythonPackages ++ extraPythonPackages)))))
-          (inputs.pkgs.callPackage ({ stdenv }: stdenv.mkDerivation
-          {
-            name = "prebuild-packages";
-            propagateBuildInputs = subtractLists excludePrebuildPackages (_prebuildPackages ++ extraPrebuildPackages);
-            phases = [ "installPhase" ];
-            installPhase =
-            ''
-              runHook preInstall
-              mkdir -p $out
-              runHook postInstall
-            '';
-          }) {})
-        ];
-    };
+  {
+    environment.systemPackages = let inherit (inputs.lib.lists) subtractLists; in with inputs.config.nixos.packages;
+      (inputs.lib.lists.subtractLists excludePackages (_packages ++ extraPackages))
+      ++ [
+        (inputs.pkgs.python3.withPackages (pythonPackages:
+          inputs.lib.lists.subtractLists
+            (builtins.concatLists (builtins.map (packageFunction: packageFunction pythonPackages)
+              excludePythonPackages))
+            (builtins.concatLists (builtins.map (packageFunction: packageFunction pythonPackages)
+              (_pythonPackages ++ extraPythonPackages)))))
+        (inputs.pkgs.callPackage ({ stdenv }: stdenv.mkDerivation
+        {
+          name = "prebuild-packages";
+          propagateBuildInputs = inputs.lib.lists.subtractLists excludePrebuildPackages
+            (_prebuildPackages ++ extraPrebuildPackages);
+          phases = [ "installPhase" ];
+          installPhase =
+          ''
+            runHook preInstall
+            mkdir -p $out
+            runHook postInstall
+          '';
+        }) {})
+      ];
+  };
 }

    # programs.firejail =
--- a/modules/packages/desktop-extra.nix
+++ b/modules/packages/desktop-extra.nix
@@ -0,0 +1,46 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  {
+    nixos =
+    {
+      packages = with inputs.pkgs;
+      {
+        _packages =
+        [
+          # system management
+          etcher btrfs-assistant snapper-gui libsForQt5.qtstyleplugin-kvantum ventoy-full cpu-x
+          # password and key management
+          yubikey-manager yubikey-manager-qt yubikey-personalization yubikey-personalization-gui bitwarden
+          # download
+          qbittorrent nur-xddxdd.baidupcs-go wgetpaste
+          # development
+          scrcpy weston cage openbox krita
+          # media
+          spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc obs-studio
+          waifu2x-converter-cpp inkscape blender
+          # editor
+          unstablePackages.typora
+          # themes
+          orchis-theme plasma-overdose-kde-theme materia-kde-theme graphite-kde-theme arc-kde-theme materia-theme
+          # news
+          fluent-reader
+          # nix tools
+          deploy-rs.deploy-rs nixpkgs-fmt appimage-run nixd nix-serve node2nix nix-prefetch-github prefetch-npm-deps
+          nix-prefetch-docker
+          # instant messager
+          element-desktop telegram-desktop discord fluffychat zoom-us signal-desktop slack nur-linyinfeng.wemeet
+          # browser
+          google-chrome
+          # office
+          crow-translate zotero pandoc ydict libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
+          (texlive.combine { inherit (texlive) scheme-full; inherit (localPackages) citation-style-language; })
+          nextcloud-client
+          # math, physics and chemistry
+          octaveFull root ovito localPackages.vesta localPackages.vaspkit localPackages.v-sim
+        ] ++ (with inputs.lib; filter isDerivation (attrValues plasma5Packages.kdeGear));
+      };
+    };
+    programs.kdeconnect.enable = true;
+  };
+}
--- a/modules/packages/desktop-fat/default.nix
+++ b/modules/packages/desktop-fat/default.nix
@@ -1,50 +0,0 @@
-inputs:
-{
-  imports = inputs.localLib.findModules ./.;
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "desktop-fat" inputs.config.nixos.packages._packageSets)
-    {
-      nixos =
-      {
-        packages = with inputs.pkgs;
-        {
-          _packages =
-          [
-            # system management
-            etcher btrfs-assistant snapper-gui libsForQt5.qtstyleplugin-kvantum ventoy-full cpu-x
-            # password and key management
-            yubikey-manager yubikey-manager-qt yubikey-personalization yubikey-personalization-gui bitwarden
-            # download
-            qbittorrent nur-xddxdd.baidupcs-go wgetpaste
-            # development
-            scrcpy weston cage openbox krita
-            # media
-            spotify yesplaymusic simplescreenrecorder imagemagick gimp netease-cloud-music-gtk vlc obs-studio
-            waifu2x-converter-cpp inkscape blender
-            # editor
-            unstablePackages.typora
-            # themes
-            orchis-theme plasma-overdose-kde-theme materia-kde-theme graphite-kde-theme arc-kde-theme materia-theme
-            # news
-            fluent-reader
-            # nix tools
-            deploy-rs.deploy-rs nixpkgs-fmt appimage-run nixd nix-serve node2nix nix-prefetch-github prefetch-npm-deps
-            nix-prefetch-docker
-            # instant messager
-            element-desktop telegram-desktop discord fluffychat zoom-us signal-desktop slack nur-linyinfeng.wemeet
-            # browser
-            google-chrome
-            # office
-            crow-translate zotero pandoc ydict libreoffice-qt texstudio poppler_utils pdftk gnuplot pdfchain hdfview
-            (texlive.combine { inherit (texlive) scheme-full; inherit (localPackages) citation-style-language; })
-            nextcloud-client
-            # math, physics and chemistry
-            octaveFull root ovito localPackages.vesta localPackages.vaspkit localPackages.v-sim
-          ] ++ (with inputs.lib; filter isDerivation (attrValues plasma5Packages.kdeGear));
-        };
-      };
-      programs.kdeconnect.enable = true;
-    };
-}
--- a/modules/packages/desktop-fat/steam.nix
+++ b/modules/packages/desktop-fat/steam.nix
@@ -1,23 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "desktop-fat" inputs.config.nixos.packages._packageSets)
-    {
-      programs.steam =
-      {
-        enable = true;
-        package = inputs.pkgs.steam.override (prev:
-        {
-          steam = prev.steam.overrideAttrs (prev:
-          {
-            postInstall = prev.postInstall +
-            ''
-              sed -i 's#Comment\[zh_CN\]=.*$#Comment\[zh_CN\]=思题慕®学习平台#' $out/share/applications/steam.desktop
-            '';
-          });
-        });
-      };
-    };
-}
--- a/modules/packages/desktop/chromium.nix
+++ b/modules/packages/desktop/chromium.nix
@@ -1,42 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
-    {
-      programs.chromium = { enable = true; extraOpts.PasswordManagerEnabled = false; };
-      nixos.user.sharedModules =
-      [{
-        config.programs.chromium =
-        {
-          enable = true;
-          extensions =
-          # TODO: declartive way to install extensions, with fixed xpi file
-          # TODO: declartively config
-          [
-            { id = "mpkodccbngfoacfalldjimigbofkhgjn"; } # Aria2 Explorer
-            { id = "nngceckbapebfimnlniiiahkandclblb"; } # Bitwarden
-            { id = "kbfnbcaeplbcioakkpcpgfkobkghlhen"; } # Grammarly
-            { id = "ihnfpdchjnmlehnoeffgcbakfmdjcckn"; } # Pixiv Fanbox Downloader
-            { id = "cimiefiiaegbelhefglklhhakcgmhkai"; } # Plasma Integration
-            { id = "dkndmhgdcmjdmkdonmbgjpijejdcilfh"; } # Powerful Pixiv Downloader
-            { id = "padekgcemlokbadohgkifijomclgjgif"; } # Proxy SwitchyOmega
-            { id = "kefjpfngnndepjbopdmoebkipbgkggaa"; } # RSSHub Radar
-            { id = "abpdnfjocnmdomablahdcfnoggeeiedb"; } # Save All Resources
-            { id = "nbokbjkabcmbfdlbddjidfmibcpneigj"; } # SmoothScroll
-            { id = "onepmapfbjohnegdmfhndpefjkppbjkm"; } # SuperCopy 超级复制
-            { id = "cjpalhdlnbpafiamejdnhcphjbkeiagm"; } # uBlock Origin
-            { id = "gppongmhjkpfnbhagpmjfkannfbllamg"; } # Wappalyzer
-            { id = "hkbdddpiemdeibjoknnofflfgbgnebcm"; } # YouTube™ 双字幕
-            { id = "ekhagklcjbdpajgpjgmbionohlpdbjgc"; } # Zotero Connector
-            { id = "ikhdkkncnoglghljlkmcimlnlhkeamad"; } # 划词翻译
-            { id = "dhdgffkkebhmkfjojejmpbldmpobfkfo"; } # 篡改猴
-            { id = "hipekcciheckooncpjeljhnekcoolahp"; } # Tabliss
-            { id = "nkbihfbeogaeaoehlefnkodbefgpgknn"; } # MetaMask
-            { id = "bpoadfkcbjbfhfodiogcnhhhpibjhbnh"; } # 沉浸式翻译
-          ];
-        };
-      }];
-    };
-}
--- a/modules/packages/desktop/default.nix
+++ b/modules/packages/desktop/default.nix
@@ -1,60 +1,56 @@
 inputs:
 {
-  imports = inputs.localLib.findModules ./.;
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  {
+    nixos =
    {
-      nixos =
-      {
-        packages._packages = with inputs.pkgs;
-        [
-          # system management
-          gparted kio-fuse wayland-utils clinfo glxinfo vulkan-tools dracut
-          (
-            writeShellScriptBin "xclip"
-            ''
-              #!${bash}/bin/bash
-              if [ "$XDG_SESSION_TYPE" = "x11" ]; then
-                exec ${xclip}/bin/xclip -sel clip "$@"
-              else
-                exec ${wl-clipboard-x11}/bin/xclip "$@"
-              fi
-            ''
-          )
-          # color management
-          argyllcms xcalib
-          # networking
-          remmina putty mtr-gui
-          # media
-          mpv nomacs
-          # themes
-          tela-circle-icon-theme localPackages.win11os-kde localPackages.fluent-kde localPackages.blurred-wallpaper
-          localPackages.slate utterly-nord-plasma
-          # terminal
-          unstablePackages.warp-terminal
-          # development
-          adb-sync
-          # virtual keyboard
-          localPackages.kylin-virtual-keyboard
-        ];
-      };
-      programs =
-      {
-        adb.enable = true;
-        wireshark = { enable = true; package = inputs.pkgs.wireshark; };
-        vim.package = inputs.pkgs.vim-full;
-        yubikey-touch-detector.enable = true;
-      };
-      nixpkgs.config.packageOverrides = pkgs: 
-      {
-        telegram-desktop = pkgs.telegram-desktop.overrideAttrs (attrs:
-        {
-          patches = (if (attrs ? patches) then attrs.patches else []) ++ [ ./telegram.patch ];
-        });
-      };
-      services.pcscd.enable = true;
+      packages._packages = with inputs.pkgs;
+      [
+        # system management
+        gparted kio-fuse wayland-utils clinfo glxinfo vulkan-tools dracut
+        (
+          writeShellScriptBin "xclip"
+          ''
+            #!${bash}/bin/bash
+            if [ "$XDG_SESSION_TYPE" = "x11" ]; then
+              exec ${xclip}/bin/xclip -sel clip "$@"
+            else
+              exec ${wl-clipboard-x11}/bin/xclip "$@"
+            fi
+          ''
+        )
+        # color management
+        argyllcms xcalib
+        # networking
+        remmina putty mtr-gui
+        # media
+        mpv nomacs
+        # themes
+        tela-circle-icon-theme localPackages.win11os-kde localPackages.fluent-kde localPackages.blurred-wallpaper
+        localPackages.slate utterly-nord-plasma
+        # terminal
+        unstablePackages.warp-terminal
+        # development
+        adb-sync
+        # virtual keyboard
+        localPackages.kylin-virtual-keyboard
+      ];
    };
+    programs =
+    {
+      adb.enable = true;
+      wireshark = { enable = true; package = inputs.pkgs.wireshark; };
+      vim.package = inputs.pkgs.vim-full;
+      yubikey-touch-detector.enable = true;
+    };
+    nixpkgs.config.packageOverrides = pkgs: 
+    {
+      telegram-desktop = pkgs.telegram-desktop.overrideAttrs (attrs:
+      {
+        patches = (if (attrs ? patches) then attrs.patches else []) ++ [ ./telegram.patch ];
+      });
+    };
+    services.pcscd.enable = true;
+  };
 }

--- a/modules/packages/desktop/plasma/default.nix
+++ b/modules/packages/desktop/plasma/default.nix
@@ -1,98 +0,0 @@
-inputs:
-{
-  imports = inputs.localLib.findModules ./.;
-  config.nixos.user.sharedModules = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
-  [{
-    config.programs.plasma = inputs.lib.mkMerge
-    [
-      # TODO: autostart, panel, discard user changed settings
-      # general
-      {
-        enable = true;
-        configFile.plasma-localerc = { Formats.LANG = "en_US.UTF-8"; Translations.LANGUAGE = "zh_CN"; };
-      }
-      # kwin
-      {
-        kwin.titlebarButtons =
-        {
-          right = [ "help" "keep-below-windows" "keep-above-windows" "minimize" "maximize" "close" ];
-          left = [ "more-window-actions" ];
-        };
-        windows.allowWindowsToRememberPositions = false;
-        configFile =
-        {
-          plasmanotifyrc.Notifications.PopupPosition = "BottomRight";
-          kwinrc =
-          {
-            Tiling.padding = 4;
-            Wayland."InputMethod[$e]" = "/run/current-system/sw/share/applications/org.fcitx.Fcitx5.desktop";
-            Windows.RollOverDesktops = true;
-            Compositing = { AllowTearing = false; WindowsBlockCompositing = false; };
-          };
-        };
-      }
-      # baloo
-      { configFile.baloofilerc."Basic Settings".Indexing-Enabled = false; }
-      # dolphin and file chooser
-      {
-        configFile =
-        {
-          dolphinrc =
-          {
-            General = { ShowFullPath = true; FilterBar = true; RememberOpenedTabs = false; };
-            PreviewSettings.Plugins = builtins.concatStringsSep ","
-            [
-              "blenderthumbnail"
-              "comicbookthumbnail"
-              "djvuthumbnail"
-              "ebookthumbnail"
-              "exrthumbnail"
-              "marble_thumbnail_geojson"
-              "marble_thumbnail_gpx"
-              "jpegthumbnail"
-              "marble_thumbnail_kmz"
-              "marble_thumbnail_kml"
-              "kraorathumbnail"
-              "windowsimagethumbnail"
-              "windowsexethumbnail"
-              "mltpreview"
-              "mobithumbnail"
-              "opendocumentthumbnail"
-              "marble_thumbnail_osm"
-              "palathumbcreator"
-              "gsthumbnail"
-              "rawthumbnail"
-              "svgthumbnail"
-              "imagethumbnail"
-              "fontthumbnail"
-              "directorythumbnail"
-              "textthumbnail"
-              "webarchivethumbnail"
-              "ffmpegthumbs"
-              "audiothumbnail"
-            ];
-          };
-          kdeglobals."KFileDialog Settings" =
-          {
-            "Allow Expansion" = true;
-            "Automatically select filename extension" = true;
-            "Show Bookmarks" = true;
-            "Show Full Path" = true;
-            "Show Inline Previews" = true;
-            "Show Preview" = true;
-            "Show Speedbar" = true;
-            "Show hidden files" = true;
-            "Sort by" = "Name";
-            "Sort directories first" = true;
-            "Sort hidden files last" = true;
-            "View Style" = "DetailTree";
-          };
-        };
-      }
-      # krunner
-      { configFile.krunnerrc = { General.FreeFloating = true; Plugins.baloosearchEnabled = false; }; }
-      # lock screen
-      { configFile.kscreenlockerrc.Daemon.Autolock = false; }
-    ];
-  }];
-}
--- a/modules/packages/desktop/plasma/konsole.nix
+++ b/modules/packages/desktop/plasma/konsole.nix
@@ -1,84 +0,0 @@
-inputs:
-{
-  config = inputs.lib.mkIf inputs.config.nixos.system.gui.enable
-  {
-    nixos.user.sharedModules =
-    [(hmInputs: {
-      config =
-      {
-        programs.plasma =
-        {
-          overrideConfig = true;
-          overrideConfigFiles = [ "konsolerc" "yakuakerc" ];
-          configFile =
-          {
-            yakuakerc =
-            {
-              Appearance =
-              {
-                HideSkinBorders = true;
-                Skin = "Slate";
-                Translucency = true;
-              };
-              "Desktop Entry".DefaultProfile = "plasma-manager.profile";
-              Dialogs.FirstRun = false;
-              Window =
-              {
-                KeepOpen = false;
-                KeepOpenAfterLastSessionCloses = true;
-                ShowSystrayIcon = false;
-              };
-            };
-            konsolerc =
-            {
-              "Desktop Entry".DefaultProfile = "plasma-manager.profile";
-              "MainWindow.Toolbar sessionToolbar".ToolButtonStyle = "IconOnly";
-            };
-          };
-          dataFile."konsole/plasma-manager.profile" =
-          {
-            Appearance =
-            {
-              AntiAliasFonts = true;
-              BoldIntense = true;
-              ColorScheme = "Breeze";
-              Font = "FiraCode Nerd Font Mono,10,-1,5,50,0,0,0,0,0";
-              UseFontLineChararacters = true;
-              WordModeAttr = false;
-            };
-            "Cursor Options".CursorShape = 1;
-            General =
-            {
-              Name = "plasma-manager";
-              Parent = "FALLBACK/";
-              TerminalCenter = true;
-              TerminalMargin = 1;
-            };
-            "Interaction Options" =
-            {
-              AutoCopySelectedText = true;
-              TrimLeadingSpacesInSelectedText = true;
-              TrimTrailingSpacesInSelectedText = true;
-              UnderlineFilesEnabled = true;
-            };
-            Scrolling =
-            {
-              HistoryMode = 2;
-              ReflowLines = false;
-            };
-            "Terminal Features".BlinkingCursorEnabled = true;
-          };
-        };
-        home.file.".local/share/konsole/Breeze.colorscheme".text = builtins.replaceStrings
-          [ "Opacity=1" ] [ "Opacity=0.9\nBlur=true" ]
-          (builtins.readFile "${inputs.pkgs.konsole}/share/konsole/Breeze.colorscheme");
-      };
-    })];
-    environment.persistence =
-      let impermanence = inputs.config.nixos.system.impermanence;
-      in inputs.lib.mkIf impermanence.enable (inputs.lib.mkMerge (builtins.map
-        (user:
-          { "${impermanence.root}".users.${user}.directories = [ ".local/share/konsole" ".local/share/yakuake" ]; })
-        inputs.config.nixos.user.users));
-  };
-}
--- a/modules/packages/emacs/default.nix
+++ b/modules/packages/emacs/default.nix
@@ -0,0 +1,7 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.user.sharedModules = [{ config.programs.doom-emacs = { enable = true; doomPrivateDir = ./doom.d; }; }];
+  };
+}
--- a/modules/packages/workstation/doom.d/config.el
+++ b/modules/packages/workstation/doom.d/config.el
--- a/modules/packages/workstation/doom.d/init.el
+++ b/modules/packages/workstation/doom.d/init.el
--- a/modules/packages/workstation/doom.d/packages.el
+++ b/modules/packages/workstation/doom.d/packages.el
--- a/modules/packages/desktop/firefox.nix
+++ b/modules/packages/desktop/firefox.nix
@@ -10,6 +10,7 @@ inputs:
        # TODO: switch to 24.05
        # nativeMessagingHosts = [ inputs.pkgs.plasma-browser-integration ];
        # TODO: switch to chromium as default browser
+        # TODO: use fixed-version of plugins
        package = inputs.pkgs.firefox.override { nativeMessagingHosts = [ inputs.pkgs.plasma-browser-integration ]; };
        policies.DefaultDownloadDirectory = "\${home}/Downloads";
        profiles.default =
@@ -18,18 +19,7 @@ inputs:
          [
            immersive-translate tampermonkey bitwarden cookies-txt dualsub firefox-color i-dont-care-about-cookies
            metamask pakkujs switchyomega rsshub-radar rsspreview tabliss tree-style-tab ublock-origin wallabagger
-            wappalyzer grammarly plasma-integration
-            (
-              buildFirefoxXpiAddon rec
-              {
-                pname = "zotero-connector";
-                version = "5.0.119";
-                addonId = "zotero@chnm.gmu.edu";
-                url = "https://download.zotero.org/connector/firefox/release/Zotero_Connector-${version}.xpi";
-                sha256 = "17yhkp5nrx325q3amlasb4nsw0bldm8i2i9fh8ql2hwj8fmy25mr";
-                meta = {};
-              }
-            )
+            wappalyzer grammarly plasma-integration zotero-connector.zotero-connector
          ];
          search = { default = "Google"; force = true; };
          userChrome = builtins.readFile "${inputs.topInputs.lepton}/userChrome.css";
--- a/modules/packages/flatpak.nix
+++ b/modules/packages/flatpak.nix
@@ -1,11 +1,11 @@
 inputs:
 {
-  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
  {
    services.flatpak =
    {
      enable = true;
-      uninstallUnmanagedPackages = true;
+      uninstallUnmanaged = true;
    };
  };
 }
--- a/modules/packages/gpg.nix
+++ b/modules/packages/gpg.nix
@@ -0,0 +1,7 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  {
+    programs.gnupg.agent = { enable = true; pinentryFlavor = "tty"; };
+  };
+}
--- a/modules/packages/plasma/default.nix
+++ b/modules/packages/plasma/default.nix
@@ -0,0 +1,113 @@
+inputs:
+{
+  imports = inputs.localLib.findModules ./.;
+  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.user.sharedModules =
+    [{
+      config.programs.plasma = inputs.lib.mkMerge
+      [
+        # TODO: autostart, panel, discard user changed settings
+        # general
+        {
+          enable = true;
+          configFile.plasma-localerc = { Formats.LANG.value = "en_US.UTF-8"; Translations.LANGUAGE.value = "zh_CN"; };
+        }
+        # kwin
+        {
+          kwin.titlebarButtons =
+          {
+            right = [ "help" "keep-below-windows" "keep-above-windows" "minimize" "maximize" "close" ];
+            left = [ "more-window-actions" ];
+          };
+          windows.allowWindowsToRememberPositions = false;
+          configFile =
+          {
+            plasmanotifyrc.Notifications.PopupPosition.value = "BottomRight";
+            kwinrc =
+            {
+              Tiling.padding.value = 4;
+              Wayland."InputMethod[$e]".value = "/run/current-system/sw/share/applications/org.fcitx.Fcitx5.desktop";
+              Windows.RollOverDesktops.value = true;
+              Compositing = { AllowTearing.value = false; WindowsBlockCompositing.value = false; };
+            };
+          };
+        }
+        # baloo
+        { configFile.baloofilerc."Basic Settings".Indexing-Enabled.value = false; }
+        # dolphin and file chooser
+        {
+          configFile =
+          {
+            dolphinrc =
+            {
+              General = { ShowFullPath.value = true; FilterBar.value = true; RememberOpenedTabs.value = false; };
+              PreviewSettings.Plugins.value = builtins.concatStringsSep ","
+              [
+                "blenderthumbnail"
+                "comicbookthumbnail"
+                "djvuthumbnail"
+                "ebookthumbnail"
+                "exrthumbnail"
+                "marble_thumbnail_geojson"
+                "marble_thumbnail_gpx"
+                "jpegthumbnail"
+                "marble_thumbnail_kmz"
+                "marble_thumbnail_kml"
+                "kraorathumbnail"
+                "windowsimagethumbnail"
+                "windowsexethumbnail"
+                "mltpreview"
+                "mobithumbnail"
+                "opendocumentthumbnail"
+                "marble_thumbnail_osm"
+                "palathumbcreator"
+                "gsthumbnail"
+                "rawthumbnail"
+                "svgthumbnail"
+                "imagethumbnail"
+                "fontthumbnail"
+                "directorythumbnail"
+                "textthumbnail"
+                "webarchivethumbnail"
+                "ffmpegthumbs"
+                "audiothumbnail"
+              ];
+            };
+            kdeglobals."KFileDialog Settings" =
+            {
+              "Allow Expansion".value = true;
+              "Automatically select filename extension".value = true;
+              "Show Bookmarks".value = true;
+              "Show Full Path".value = true;
+              "Show Inline Previews".value = true;
+              "Show Preview".value = true;
+              "Show Speedbar".value = true;
+              "Show hidden files".value = true;
+              "Sort by".value = "Name";
+              "Sort directories first".value = true;
+              "Sort hidden files last".value = true;
+              "View Style".value = "DetailTree";
+            };
+          };
+        }
+        # krunner
+        { configFile.krunnerrc = { General.FreeFloating.value = true; Plugins.baloosearchEnabled.value = false; }; }
+        # lock screen
+        { configFile.kscreenlockerrc.Daemon.Autolock.value = false; }
+      ];
+    }];
+    nixpkgs.overlays = [(final: prev:
+    {
+      libsForQt5 = prev.libsForQt5.overrideScope (final: prev:
+      {
+        plasma5 = prev.plasma5.overrideScope (final: prev:
+        {
+          xdg-desktop-portal-kde = prev.xdg-desktop-portal-kde.overrideAttrs (prev:
+            { patches = (prev.patches or []) ++ [ ./krfb.patch ]; });
+        });
+        xdg-desktop-portal-kde = final.plasma5.xdg-desktop-portal-kde;
+      });
+    })];
+  };
+}
--- a/modules/packages/plasma/konsole.nix
+++ b/modules/packages/plasma/konsole.nix
@@ -0,0 +1,80 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.user.sharedModules =
+    [{
+      config =
+      {
+        programs.plasma =
+        {
+          overrideConfig = true;
+          overrideConfigFiles = [ "konsolerc" "yakuakerc" ];
+          configFile =
+          {
+            yakuakerc =
+            {
+              Appearance =
+              {
+                HideSkinBorders.value = true;
+                Skin.value = "Slate";
+                Translucency.value = true;
+              };
+              "Desktop Entry".DefaultProfile.value = "plasma-manager.profile";
+              Dialogs.FirstRun.value = false;
+              Window =
+              {
+                KeepOpen.value = false;
+                KeepOpenAfterLastSessionCloses.value = true;
+                ShowSystrayIcon.value = false;
+              };
+            };
+            konsolerc =
+            {
+              "Desktop Entry".DefaultProfile.value = "plasma-manager.profile";
+              "MainWindow.Toolbar sessionToolbar".ToolButtonStyle.value = "IconOnly";
+            };
+          };
+          dataFile."konsole/plasma-manager.profile" =
+          {
+            Appearance =
+            {
+              AntiAliasFonts.value = true;
+              BoldIntense.value = true;
+              ColorScheme.value = "Breeze";
+              Font.value = "FiraCode Nerd Font Mono,10,-1,5,50,0,0,0,0,0";
+              UseFontLineChararacters.value = true;
+              WordModeAttr.value = false;
+            };
+            "Cursor Options".CursorShape.value = 1;
+            General =
+            {
+              Name.value = "plasma-manager";
+              Parent.value = "FALLBACK/";
+              TerminalCenter.value = true;
+              TerminalMargin.value = 1;
+            };
+            "Interaction Options" =
+            {
+              AutoCopySelectedText.value = true;
+              TrimLeadingSpacesInSelectedText.value = true;
+              TrimTrailingSpacesInSelectedText.value = true;
+              UnderlineFilesEnabled.value = true;
+            };
+            Scrolling = { HistoryMode.value = 2; ReflowLines.value = false; };
+            "Terminal Features".BlinkingCursorEnabled.value = true;
+          };
+        };
+        home.file.".local/share/konsole/Breeze.colorscheme".text = builtins.replaceStrings
+          [ "Opacity=1" ] [ "Opacity=0.9\nBlur=true" ]
+          (builtins.readFile "${inputs.pkgs.konsole}/share/konsole/Breeze.colorscheme");
+      };
+    }];
+    environment.persistence =
+      let impermanence = inputs.config.nixos.system.impermanence;
+      in inputs.lib.mkIf impermanence.enable (inputs.lib.mkMerge (builtins.map
+        (user:
+          { "${impermanence.root}".users.${user}.directories = [ ".local/share/konsole" ".local/share/yakuake" ]; })
+        inputs.config.nixos.user.users));
+  };
+}
--- a/modules/packages/plasma/krfb.patch
+++ b/modules/packages/plasma/krfb.patch
@@ -0,0 +1,15 @@
+diff --git a/src/remotedesktop.cpp b/src/remotedesktop.cpp
+index 9c27b10..100d6f3 100644
+--- a/src/remotedesktop.cpp
+++ b/src/remotedesktop.cpp
+@@ -136,10 +136,6 @@ uint RemoteDesktopPortal::Start(const QDBusObjectPath &handle,
+         Utils::setParentWindow(remoteDesktopDialog->windowHandle(), parent_window);
+         Request::makeClosableDialogRequest(handle, remoteDesktopDialog.get());
+         connect(session, &Session::closed, remoteDesktopDialog.data(), &RemoteDesktopDialog::reject);
+-
+-        if (!remoteDesktopDialog->exec()) {
+-            return 1;
+-        }
+     }
+ 
+     if (session->screenSharingEnabled()) {
--- a/modules/packages/server-extra.nix
+++ b/modules/packages/server-extra.nix
@@ -0,0 +1,48 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "server-extra" inputs.config.nixos.packages._packageSets)
+  {
+    nixos =
+    {
+      packages = with inputs.pkgs;
+      {
+        _packages =
+        [
+          # shell
+          ksh
+          # basic tools
+          neofetch
+          # nix tools
+          inputs.topInputs.nix-inspect.packages."${inputs.config.nixos.system.nixpkgs.arch}-linux".default
+          # office
+          todo-txt-cli pdfgrep
+          # development
+          hexo-cli gh
+          # install per project
+          # stdenv gfortran nodejs
+          # library
+          # fmt fmt.dev localPackages.nameof localPackages.matplotplusplus highfive hdf5 hdf5.dev
+          # localPackages.concurrencpp localPackages.biu localPackages.magik-enum
+          # (
+          #   runCommand "concurrencpp" {}
+          #     "mkdir $out; ln -s ${localPackages.concurrencpp}/include/concurrencpp-* $out/include"
+          # )
+          # eigen (runCommand "eigen" {} "mkdir $out; ln -s ${eigen}/include/eigen3 $out/include")
+        ]
+        ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
+        ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
+        _pythonPackages = [(pythonPackages: with pythonPackages;
+        [
+          openai python-telegram-bot fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
+          certifi charset-normalizer idna orjson psycopg2 inquirerpy requests tqdm pydbus
+        ])];
+      };
+    };
+    programs =
+    {
+      yazi.enable = true;
+      mosh.enable = true;
+    };
+    services.fwupd.enable = true;
+  };
+}
--- a/modules/packages/server.nix
+++ b/modules/packages/server.nix
@@ -0,0 +1,117 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  {
+    nixos =
+    {
+      packages = with inputs.pkgs;
+      {
+        _packages =
+        [
+          # basic tools
+          beep dos2unix gnugrep pv tmux screen parallel tldr cowsay jq zellij ipfetch localPackages.pslist
+          fastfetch reptyr
+          # lsxx
+          pciutils usbutils lshw util-linux lsof dmidecode
+          # top
+          iotop iftop htop btop powertop s-tui
+          # editor
+          nano bat
+          # downloader
+          wget aria2 curl yt-dlp
+          # file manager
+          tree eza trash-cli lsd broot file xdg-ninja mlocate
+          # compress
+          pigz upx unzip zip lzip p7zip
+          # file system management
+          sshfs e2fsprogs duperemove compsize exfatprogs
+          # disk management
+          smartmontools hdparm
+          # encryption and authentication
+          apacheHttpd openssl ssh-to-age gnupg age sops pam_u2f yubico-piv-tool
+          # networking
+          ipset iptables iproute2 dig nettools traceroute tcping-go whois tcpdump nmap inetutils wireguard-tools
+          # nix tools
+          nix-output-monitor nix-tree ssh-to-age (callPackage "${inputs.topInputs.nix-fast-build}" {})
+          # development
+          gdb try inputs.topInputs.plasma-manager.packages.${inputs.pkgs.system}.rc2nix
+          # stupid things
+          toilet lolcat
+        ]
+        ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
+        ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
+      };
+      user.sharedModules = [(home-inputs:
+      {
+        config.programs =
+        {
+          direnv = { enable = true; nix-direnv.enable = true; };
+          git =
+          {
+            enable = true;
+            lfs.enable = true;
+            extraConfig =
+            {
+              core.editor = if inputs.config.nixos.system.gui.preferred then "code --wait" else "vim";
+              advice.detachedHead = false;
+              merge.conflictstyle = "diff3";
+              diff.colorMoved = "default";
+            };
+            package = inputs.pkgs.gitFull;
+            delta =
+            {
+              enable = true;
+              options =
+              {
+                side-by-side = true;
+                navigate = true;
+                syntax-theme = "GitHub";
+                light = true;
+                zero-style = "syntax white";
+                line-numbers-zero-style = "#ffffff";
+              };
+            };
+          };
+          vim =
+          {
+            enable = true;
+            defaultEditor = true;
+            packageConfigurable = inputs.config.programs.vim.package;
+            settings =
+            {
+              number = true;
+              expandtab = false;
+              shiftwidth = 2;
+              tabstop = 2;
+            };
+            extraConfig =
+            ''
+              set clipboard=unnamedplus
+              colorscheme evening
+            '';
+          };
+        };
+      })];
+    };
+    programs =
+    {
+      nix-index-database.comma.enable = true;
+      nix-index.enable = true;
+      command-not-found.enable = false;
+      autojump.enable = true;
+      git =
+      {
+        enable = true;
+        package = inputs.pkgs.gitFull;
+        lfs.enable = true;
+        config =
+        {
+          init.defaultBranch = "main";
+          core = { quotepath = false; editor = "vim"; };
+        };
+      };
+    };
+    services.udev.packages = with inputs.pkgs; [ yubikey-personalization libfido2 ];
+    home-manager = { useGlobalPkgs = true; useUserPackages = true; };
+  };
+}
--- a/modules/packages/server/default.nix
+++ b/modules/packages/server/default.nix
@@ -1,148 +0,0 @@
-inputs:
-{
-  imports = inputs.localLib.findModules ./.;
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-      inherit (builtins) concatLists map listToAttrs;
-      inherit (inputs.localLib) attrsToList;
-    in mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
-    {
-      nixos =
-      {
-        packages = with inputs.pkgs;
-        {
-          _packages =
-          [
-            # shell
-            ksh
-            # basic tools
-            beep dos2unix gnugrep pv tmux screen parallel tldr cowsay jq zellij neofetch ipfetch localPackages.pslist
-            fastfetch reptyr
-            # lsxx
-            pciutils usbutils lshw util-linux lsof dmidecode
-            # top
-            iotop iftop htop btop powertop s-tui
-            # editor
-            nano bat
-            # downloader
-            wget aria2 curl yt-dlp
-            # file manager
-            tree eza trash-cli lsd broot file xdg-ninja mlocate
-            # compress
-            pigz upx unzip zip lzip p7zip
-            # file system management
-            sshfs e2fsprogs duperemove compsize exfatprogs
-            # disk management
-            smartmontools hdparm
-            # encryption and authentication
-            apacheHttpd openssl ssh-to-age gnupg age sops pam_u2f yubico-piv-tool
-            # networking
-            ipset iptables iproute2 dig nettools traceroute tcping-go whois tcpdump nmap inetutils wireguard-tools
-            # nix tools
-            nix-output-monitor nix-tree ssh-to-age (callPackage "${inputs.topInputs.nix-fast-build}" {})
-            # office
-            todo-txt-cli pdfgrep
-            # development
-            gdb try inputs.topInputs.plasma-manager.packages.${inputs.pkgs.system}.rc2nix hexo-cli gh
-            # install per project
-            # stdenv gfortran nodejs
-            # library
-            # fmt fmt.dev localPackages.nameof localPackages.matplotplusplus highfive hdf5 hdf5.dev
-            # localPackages.concurrencpp localPackages.biu localPackages.magik-enum
-            # (
-            #   runCommand "concurrencpp" {}
-            #     "mkdir $out; ln -s ${localPackages.concurrencpp}/include/concurrencpp-* $out/include"
-            # )
-            # eigen (runCommand "eigen" {} "mkdir $out; ln -s ${eigen}/include/eigen3 $out/include")
-            # stupid things
-            toilet lolcat
-          ]
-          ++ (with inputs.config.boot.kernelPackages; [ cpupower usbip ])
-          ++ (inputs.lib.optional (inputs.config.nixos.system.nixpkgs.arch == "x86_64") rar);
-          _pythonPackages = [(pythonPackages: with pythonPackages;
-          [
-            openai python-telegram-bot fastapi pypdf2 pandas matplotlib plotly gunicorn redis jinja2
-            certifi charset-normalizer idna orjson psycopg2 inquirerpy requests tqdm pydbus
-          ])];
-        };
-        user.sharedModules = [(home-inputs:
-        {
-          config.programs =
-          {
-            direnv = { enable = true; nix-direnv.enable = true; };
-            git =
-            {
-              enable = true;
-              lfs.enable = true;
-              extraConfig =
-              {
-                core.editor = if inputs.config.nixos.system.gui.preferred then "code --wait" else "vim";
-                advice.detachedHead = false;
-                merge.conflictstyle = "diff3";
-                diff.colorMoved = "default";
-              };
-              package = inputs.pkgs.gitFull;
-              delta =
-              {
-                enable = true;
-                options =
-                {
-                  side-by-side = true;
-                  navigate = true;
-                  syntax-theme = "GitHub";
-                  light = true;
-                  zero-style = "syntax white";
-                  line-numbers-zero-style = "#ffffff";
-                };
-              };
-            };
-            vim =
-            {
-              enable = true;
-              defaultEditor = true;
-              packageConfigurable = inputs.config.programs.vim.package;
-              settings =
-              {
-                number = true;
-                expandtab = false;
-                shiftwidth = 2;
-                tabstop = 2;
-              };
-              extraConfig =
-              ''
-                set clipboard=unnamedplus
-                colorscheme evening
-              '';
-            };
-          };
-        })];
-      };
-      programs =
-      {
-        nix-index-database.comma.enable = true;
-        nix-index.enable = true;
-        command-not-found.enable = false;
-        autojump.enable = true;
-        git =
-        {
-          enable = true;
-          package = inputs.pkgs.gitFull;
-          lfs.enable = true;
-          config =
-          {
-            init.defaultBranch = "main";
-            core = { quotepath = false; editor = "vim"; };
-          };
-        };
-        yazi.enable = true;
-        mosh.enable = true;
-      };
-      services =
-      {
-        fwupd.enable = true;
-        udev.packages = with inputs.pkgs; [ yubikey-personalization libfido2 ];
-      };
-      home-manager = { useGlobalPkgs = true; useUserPackages = true; };
-    };
-}
--- a/modules/packages/server/gpg.nix
+++ b/modules/packages/server/gpg.nix
@@ -1,10 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
-    {
-      programs.gnupg.agent = { enable = true; pinentryFlavor = "tty"; };
-    };
-}
--- a/modules/packages/server/ssh/default.nix
+++ b/modules/packages/server/ssh/default.nix
@@ -1,192 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-      inherit (builtins) concatLists map listToAttrs;
-      inherit (inputs.localLib) attrsToList;
-    in mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
-    {
-      services.openssh.knownHosts =
-        let
-          servers =
-          {
-            vps6 =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO5ZcvyRyOnUCuRtqrM/Qf+AdUe3a5bhbnfyhw2FSLDZ";
-              hostnames = [ "vps6.chn.moe" "wireguard.vps6.chn.moe" "74.211.99.69" "192.168.83.1" ];
-            };
-            "initrd.vps6" =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB4DKB/zzUYco5ap6k9+UxeO04LL12eGvkmQstnYxgnS";
-              hostnames = [ "initrd.vps6.chn.moe" "74.211.99.69" ];
-            };
-            vps7 =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5XkdilejDAlg5hZZD0oq69k8fQpe9hIJylTo/aLRgY";
-              hostnames = [ "vps7.chn.moe" "wireguard.vps7.chn.moe" "ssh.git.chn.moe" "95.111.228.40" "192.168.83.2" ];
-            };
-            "initrd.vps7" =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGZyQpdQmEZw3nLERFmk2tS1gpSvXwW0Eish9UfhrRxC";
-              hostnames = [ "initrd.vps7.chn.moe" "95.111.228.40" ];
-            };
-            nas =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIktNbEcDMKlibXg54u7QOLt0755qB/P4vfjwca8xY6V";
-              hostnames = [ "wireguard.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" "192.168.83.4" ];
-            };
-            "initrd.nas" =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAoMu0HEaFQsnlJL0L6isnkNZdRq0OiDXyaX3+fl3NjT";
-              hostnames = [ "initrd.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" ];
-            };
-            surface =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdm3DcfHdcLP0oSpVrWwIZ/b9lZuakBSPwCFz2BdTJ7";
-              hostnames = [ "192.168.1.166" "wireguard.surface.chn.moe" "192.168.83.5" ];
-            };
-            pc =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMSfREi19OSwQnhdsE8wiNwGSFFJwNGN0M5gN+sdrrLJ";
-              hostnames = [ "wireguard.pc.chn.moe" "192.168.83.3" ];
-            };
-            hpc =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDVpsQW3kZt5alHC6mZhay3ZEe2fRGziG4YJWCv2nn/O";
-              hostnames = [ "hpc.xmu.edu.cn" ];
-            };
-            github =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
-              hostnames = [ "github.com" ];
-            };
-            xmupc1 =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTvfywkKRwMrVp73HfHTfjhac2Tn9qX/lRjLr09ycHp";
-              hostnames = [ "[office.chn.moe]:6007" "[xmupc1.chn.moe]:6007" "wireguard.xmupc1.chn.moe" "192.168.83.6" ];
-            };
-            xmupc2 =
-            {
-              ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJZ/+divGnDr0x+UlknA84Tfu6TPD+zBGmxWZY4Z38P6";
-              hostnames = [ "[xmupc2.chn.moe]:6394" "wireguard.xmupc2.chn.moe" "192.168.83.7" ];
-            };
-          };
-        in listToAttrs (concatLists (map
-          (server:
-          (
-            if builtins.pathExists ./ssh/${server.name}_rsa.pub then
-            [{
-              name = "${server.name}-rsa";
-              value =
-              {
-                publicKey = builtins.readFile ./ssh/${server.name}_rsa.pub;
-                hostNames = server.value.hostnames;
-              };
-            }]
-            else []
-          )
-          ++ (
-            if builtins.pathExists ./ssh/${server.name}_ecdsa.pub then
-            [{
-              name = "${server.name}-ecdsa";
-              value =
-              {
-                publicKey = builtins.readFile ./ssh/${server.name}_ecdsa.pub;
-                hostNames = server.value.hostnames;
-              };
-            }]
-            else []
-          )
-          ++ (
-            if server.value ? ed25519 then
-            [{
-              name = "${server.name}-ed25519";
-              value =
-              {
-                publicKey = server.value.ed25519;
-                hostNames = server.value.hostnames;
-              };
-            }]
-            else []
-          ))
-          (attrsToList servers)));
-      programs.ssh =
-      {
-        startAgent = true;
-        enableAskPassword = true;
-        askPassword = "${inputs.pkgs.systemd}/bin/systemd-ask-password";
-        extraConfig = "AddKeysToAgent yes";
-      };
-      environment.sessionVariables.SSH_ASKPASS_REQUIRE = "prefer";
-      nixos.user.sharedModules =
-      [(hmInputs: {
-        config.programs.ssh =
-        {
-          enable = true;
-          controlMaster = "auto";
-          controlPersist = "1m";
-          compression = true;
-          matchBlocks = builtins.listToAttrs
-          (
-            (builtins.map
-              (host: { name = host; value = { inherit host; hostname = "${host}.chn.moe"; }; })
-              [
-                "vps6" "wireguard.vps6" "vps7" "wireguard.vps7" "wireguard.pc" "wireguard.nas" "wireguard.surface"
-                "wireguard.xmupc1" "wireguard.xmupc2"
-              ])
-            ++ (builtins.map
-              (host:
-              {
-                name = host;
-                value =
-                {
-                  host = host;
-                  hostname = "hpc.xmu.edu.cn";
-                  user = host;
-                  extraOptions =
-                  {
-                    PubkeyAcceptedAlgorithms = "+ssh-rsa";
-                    HostkeyAlgorithms = "+ssh-rsa";
-                    SetEnv =
-                      let
-                        usernameMap =
-                        {
-                          chn = "linwei/chn";
-                          xll = "linwei/Xll";
-                          yjq = "linwei/yjq";
-                          gb = "kangjunyong/gongbin";
-                        };
-                        cdString =
-                          if host == "jykang" && (usernameMap ? ${hmInputs.config.home.username}) then
-                            ":chn_cd:${usernameMap.${hmInputs.config.home.username}}"
-                          else "";
-                      in "TERM=chn_unset_ls_colors${cdString}:xterm-256color";
-                    # in .bash_profile:
-                    # if [[ $TERM == chn_unset_ls_colors* ]]; then
-                    #   export TERM=${TERM#*:}
-                    #   export CHN_LS_USE_COLOR=1
-                    # fi
-                    # if [[ $TERM == chn_cd* ]]; then
-                    #   export TERM=${TERM#*:}
-                    #   cd ~/${TERM%%:*}
-                    #   export TERM=${TERM#*:}
-                    # fi
-                    # in .bashrc
-                    # [ -n "$CHN_LS_USE_COLOR" ] && alias ls="ls --color=auto"
-                  };
-                };
-              })
-              [ "wlin" "jykang" "hwang" ])
-          )
-          // {
-            xmupc1 = { host = "xmupc1"; hostname = "xmupc1.chn.moe"; port = 6007; };
-            xmupc2 = { host = "xmupc2"; hostname = "xmupc2.chn.moe"; port = 6394; };
-            nas = { host = "nas"; hostname = "office.chn.moe"; port = 5440; };
-            surface = { host = "surface"; hostname = "192.168.1.166"; };
-            gitea = { host = "gitea"; hostname = "ssh.git.chn.moe"; };
-          };
-        };
-      })];
-    };
-}
--- a/modules/packages/server/zsh/default.nix
+++ b/modules/packages/server/zsh/default.nix
@@ -1,83 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
-    {
-      nixos.user.sharedModules = [(home-inputs: { config.programs =
-      {
-        zsh =
-        {
-          enable = true;
-          initExtraBeforeCompInit =
-          ''
-            # p10k instant prompt
-            P10K_INSTANT_PROMPT="$XDG_CACHE_HOME/p10k-instant-prompt-''${(%):-%n}.zsh"
-            [[ ! -r "$P10K_INSTANT_PROMPT" ]] || source "$P10K_INSTANT_PROMPT"
-            HYPHEN_INSENSITIVE="true"
-            export PATH=~/bin:$PATH
-            function br
-            {
-              local cmd cmd_file code
-              cmd_file=$(mktemp)
-              if broot --outcmd "$cmd_file" "$@"; then
-                cmd=$(<"$cmd_file")
-                command rm -f "$cmd_file"
-                eval "$cmd"
-              else
-                code=$?
-                command rm -f "$cmd_file"
-                return "$code"
-              fi
-            }
-            alias todo="todo.sh"
-          '';
-          plugins =
-          [
-            {
-              file = "powerlevel10k.zsh-theme";
-              name = "powerlevel10k";
-              src = "${inputs.pkgs.zsh-powerlevel10k}/share/zsh-powerlevel10k";
-            }
-            {
-              file = "p10k.zsh";
-              name = "powerlevel10k-config";
-              src = ./p10k-config;
-            }
-            {
-              name = "zsh-lsd";
-              src = inputs.pkgs.fetchFromGitHub
-              {
-                owner = "z-shell";
-                repo = "zsh-lsd";
-                rev = "65bb5ac49190beda263aae552a9369127961632d";
-                hash = "sha256-JSNsfpgiqWhtmGQkC3B0R1Y1QnDKp9n0Zaqzjhwt7Xk=";
-              };
-            }
-          ];
-          history =
-          {
-            path = "${home-inputs.config.xdg.dataHome}/zsh/zsh_history";
-            extended = true;
-            save = 100000000;
-            size = 100000000;
-          };
-        };
-        # set bash history file path, avoid overwriting zsh history
-        bash = { enable = true; historyFile =  "${home-inputs.config.xdg.dataHome}/bash/bash_history"; };
-      };})];
-      programs.zsh =
-      {
-        enable = true;
-        syntaxHighlighting.enable = true;
-        autosuggestions.enable = true;
-        enableCompletion = true;
-        ohMyZsh =
-        {
-          enable = true;
-          plugins = [ "git" "colored-man-pages" "extract" "history-substring-search" "autojump" ];
-        };
-      };
-    };
-}
--- a/modules/packages/ssh/default.nix
+++ b/modules/packages/ssh/default.nix
@@ -0,0 +1,190 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  {
+    services.openssh.knownHosts =
+      let
+        servers =
+        {
+          vps6 =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO5ZcvyRyOnUCuRtqrM/Qf+AdUe3a5bhbnfyhw2FSLDZ";
+            hostnames = [ "vps6.chn.moe" "wireguard.vps6.chn.moe" "74.211.99.69" "192.168.83.1" ];
+          };
+          "initrd.vps6" =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB4DKB/zzUYco5ap6k9+UxeO04LL12eGvkmQstnYxgnS";
+            hostnames = [ "initrd.vps6.chn.moe" "74.211.99.69" ];
+          };
+          vps7 =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF5XkdilejDAlg5hZZD0oq69k8fQpe9hIJylTo/aLRgY";
+            hostnames = [ "vps7.chn.moe" "wireguard.vps7.chn.moe" "ssh.git.chn.moe" "95.111.228.40" "192.168.83.2" ];
+          };
+          "initrd.vps7" =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGZyQpdQmEZw3nLERFmk2tS1gpSvXwW0Eish9UfhrRxC";
+            hostnames = [ "initrd.vps7.chn.moe" "95.111.228.40" ];
+          };
+          nas =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIktNbEcDMKlibXg54u7QOLt0755qB/P4vfjwca8xY6V";
+            hostnames = [ "wireguard.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" "192.168.83.4" ];
+          };
+          "initrd.nas" =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAoMu0HEaFQsnlJL0L6isnkNZdRq0OiDXyaX3+fl3NjT";
+            hostnames = [ "initrd.nas.chn.moe" "[office.chn.moe]:5440" "192.168.1.185" ];
+          };
+          surface =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFdm3DcfHdcLP0oSpVrWwIZ/b9lZuakBSPwCFz2BdTJ7";
+            hostnames = [ "192.168.1.166" "wireguard.surface.chn.moe" "192.168.83.5" ];
+          };
+          pc =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMSfREi19OSwQnhdsE8wiNwGSFFJwNGN0M5gN+sdrrLJ";
+            hostnames = [ "wireguard.pc.chn.moe" "192.168.83.3" ];
+          };
+          hpc =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDVpsQW3kZt5alHC6mZhay3ZEe2fRGziG4YJWCv2nn/O";
+            hostnames = [ "hpc.xmu.edu.cn" ];
+          };
+          github =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+            hostnames = [ "github.com" ];
+          };
+          xmupc1 =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTvfywkKRwMrVp73HfHTfjhac2Tn9qX/lRjLr09ycHp";
+            hostnames = [ "[office.chn.moe]:6007" "[xmupc1.chn.moe]:6007" "wireguard.xmupc1.chn.moe" "192.168.83.6" ];
+          };
+          xmupc2 =
+          {
+            ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJZ/+divGnDr0x+UlknA84Tfu6TPD+zBGmxWZY4Z38P6";
+            hostnames = [ "[xmupc2.chn.moe]:6394" "wireguard.xmupc2.chn.moe" "192.168.83.7" ];
+          };
+        };
+      in builtins.listToAttrs (builtins.concatLists (builtins.map
+        (server:
+        (
+          if builtins.pathExists ./ssh/${server.name}_rsa.pub then
+          [{
+            name = "${server.name}-rsa";
+            value =
+            {
+              publicKey = builtins.readFile ./ssh/${server.name}_rsa.pub;
+              hostNames = server.value.hostnames;
+            };
+          }]
+          else []
+        )
+        ++ (
+          if builtins.pathExists ./ssh/${server.name}_ecdsa.pub then
+          [{
+            name = "${server.name}-ecdsa";
+            value =
+            {
+              publicKey = builtins.readFile ./ssh/${server.name}_ecdsa.pub;
+              hostNames = server.value.hostnames;
+            };
+          }]
+          else []
+        )
+        ++ (
+          if server.value ? ed25519 then
+          [{
+            name = "${server.name}-ed25519";
+            value =
+            {
+              publicKey = server.value.ed25519;
+              hostNames = server.value.hostnames;
+            };
+          }]
+          else []
+        ))
+        (inputs.localLib.attrsToList servers)));
+    programs.ssh =
+    {
+      startAgent = true;
+      enableAskPassword = true;
+      askPassword = "${inputs.pkgs.systemd}/bin/systemd-ask-password";
+      extraConfig = "AddKeysToAgent yes";
+    };
+    environment.sessionVariables.SSH_ASKPASS_REQUIRE = "prefer";
+    nixos.user.sharedModules =
+    [(hmInputs: {
+      config.programs.ssh =
+      {
+        enable = true;
+        controlMaster = "auto";
+        controlPersist = "1m";
+        compression = true;
+        matchBlocks = builtins.listToAttrs
+        (
+          (builtins.map
+            (host: { name = host; value = { inherit host; hostname = "${host}.chn.moe"; }; })
+            [
+              "vps6" "wireguard.vps6" "vps7" "wireguard.vps7" "wireguard.pc" "wireguard.nas" "wireguard.surface"
+              "wireguard.xmupc1" "wireguard.xmupc2"
+            ])
+          ++ (builtins.map
+            (host:
+            {
+              name = host;
+              value =
+              {
+                host = host;
+                hostname = "hpc.xmu.edu.cn";
+                user = host;
+                extraOptions.SetEnv = "TERM=chn_unset_ls_colors:xterm-256color";
+              };
+            })
+            [ "wlin" "hwang" ])
+        )
+        // {
+          xmupc1 = { host = "xmupc1"; hostname = "xmupc1.chn.moe"; port = 6007; };
+          xmupc2 = { host = "xmupc2"; hostname = "xmupc2.chn.moe"; port = 6394; };
+          nas = { host = "nas"; hostname = "office.chn.moe"; port = 5440; };
+          surface = { host = "surface"; hostname = "192.168.1.166"; };
+          gitea = { host = "gitea"; hostname = "ssh.git.chn.moe"; };
+          jykang =
+          {
+            host = "jykang";
+            hostname = "hpc.xmu.edu.cn";
+            user = "jykang";
+            forwardAgent = true;
+            extraOptions.SetEnv =
+              # in .bash_profile:
+              # if [[ $TERM == chn_unset_ls_colors* ]]; then
+              #   export TERM=${TERM#*:}
+              #   export CHN_LS_USE_COLOR=1
+              # fi
+              # if [[ $TERM == chn_cd* ]]; then
+              #   export TERM=${TERM#*:}
+              #   cd ~/${TERM%%:*}
+              #   export TERM=${TERM#*:}
+              # fi
+              # in .bashrc
+              # [ -n "$CHN_LS_USE_COLOR" ] && alias ls="ls --color=auto"
+              let
+                usernameMap =
+                {
+                  chn = "linwei/chn";
+                  xll = "linwei/Xll";
+                  yjq = "linwei/yjq";
+                  gb = "kangjunyong/gongbin";
+                };
+                cdString =
+                  if usernameMap ? ${hmInputs.config.home.username} then
+                    ":chn_cd:${usernameMap.${hmInputs.config.home.username}}"
+                  else "";
+              in "TERM=chn_unset_ls_colors${cdString}:xterm-256color";
+          };
+        };
+      };
+    })];
+  };
+}
--- a/modules/packages/server/ssh/github_ecdsa.pub
+++ b/modules/packages/server/ssh/github_ecdsa.pub
--- a/modules/packages/server/ssh/github_rsa.pub
+++ b/modules/packages/server/ssh/github_rsa.pub
--- a/modules/packages/server/ssh/hpc_ecdsa.pub
+++ b/modules/packages/server/ssh/hpc_ecdsa.pub
--- a/modules/packages/server/ssh/hpc_rsa.pub
+++ b/modules/packages/server/ssh/hpc_rsa.pub
--- a/modules/packages/server/ssh/nas_rsa.pub
+++ b/modules/packages/server/ssh/nas_rsa.pub
--- a/modules/packages/server/ssh/pc_rsa.pub
+++ b/modules/packages/server/ssh/pc_rsa.pub
--- a/modules/packages/server/ssh/surface_rsa.pub
+++ b/modules/packages/server/ssh/surface_rsa.pub
--- a/modules/packages/server/ssh/vps6_rsa.pub
+++ b/modules/packages/server/ssh/vps6_rsa.pub
--- a/modules/packages/server/ssh/vps7_rsa.pub
+++ b/modules/packages/server/ssh/vps7_rsa.pub
--- a/modules/packages/server/ssh/xmupc1_rsa.pub
+++ b/modules/packages/server/ssh/xmupc1_rsa.pub
--- a/modules/packages/server/ssh/xmupc2_rsa.pub
+++ b/modules/packages/server/ssh/xmupc2_rsa.pub
--- a/modules/packages/steam.nix
+++ b/modules/packages/steam.nix
@@ -0,0 +1,20 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "desktop-extra" inputs.config.nixos.packages._packageSets)
+  {
+    programs.steam =
+    {
+      enable = true;
+      package = inputs.pkgs.steam.override (prev:
+      {
+        steam = prev.steam.overrideAttrs (prev:
+        {
+          postInstall = prev.postInstall +
+          ''
+            sed -i 's#Comment\[zh_CN\]=.*$#Comment\[zh_CN\]=思题慕®学习平台#' $out/share/applications/steam.desktop
+          '';
+        });
+      });
+    };
+  };
+}
--- a/modules/packages/vasp.nix
+++ b/modules/packages/vasp.nix
@@ -2,8 +2,10 @@ inputs:
 {
  config = inputs.lib.mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
  {
-    nixos.packages._packages = builtins.concatLists (builtins.map
-      (compiler: builtins.map (version: inputs.pkgs.localPackages.vasp.${compiler}.${version}) [ "6.3.1" "6.4.0" ])
-      [ "amd" "gnu" "gnu-mkl" "intel" "nvidia" ]);
+    nixos.packages._packages =
+      (builtins.concatLists (builtins.map
+        (compiler: builtins.map (version: inputs.pkgs.localPackages.vasp.${compiler}.${version}) [ "6.4.0" ])
+        [ "intel" "nvidia" ]))
+      ++ [ inputs.pkgs.localPackages.vasp.vtstscripts ];
  };
 }
--- a/modules/packages/desktop/vscode.nix
+++ b/modules/packages/desktop/vscode.nix
@@ -1,17 +1,26 @@
 inputs:
 {
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  config = inputs.lib.mkIf (builtins.elem "desktop" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.packages = with inputs.pkgs;
    {
-      nixos.packages = with inputs.pkgs;
-      {
-        _packages =
-        [(
-          vscode-with-extensions.override
-          {
-            vscodeExtensions = with nix-vscode-extensions.vscode-marketplace;
+      _packages =
+      [(
+        vscode-with-extensions.override
+        {
+          vscodeExtensions =
+            let extensions = builtins.listToAttrs (builtins.map
+              (set:
+              {
+                name = set;
+                value = nix-vscode-extensions.vscode-marketplace.${set} // vscode-extensions.${set} or {};
+              })
+              (inputs.lib.unique
+              (
+                (builtins.attrNames nix-vscode-extensions.vscode-marketplace)
+                ++ (builtins.attrNames vscode-extensions)
+              )));
+            in with extensions;
              (with equinusocio; [ vsc-community-material-theme vsc-material-theme-icons ])
              ++ (with github; [ copilot copilot-chat github-vscode-theme ])
              ++ (with intellsmi; [ comment-translate deepl-translate ])
@@ -50,13 +59,13 @@ inputs:
                # ChatGPT-like plugin
                codeium.codeium
              ];
-          }
-        )];
-        _pythonPackages = [(pythonPackages: with pythonPackages;
-        [
-          # required by vscode extensions restrucuredtext
-          localPackages.esbonio
-        ])];
-      };
+        }
+      )];
+      _pythonPackages = [(pythonPackages: with pythonPackages;
+      [
+        # required by vscode extensions restrucuredtext
+        localPackages.esbonio
+      ])];
    };
+  };
 }
--- a/modules/packages/workstation.nix
+++ b/modules/packages/workstation.nix
@@ -0,0 +1,60 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
+  {
+    nixos =
+    {
+      packages = with inputs.pkgs;
+      {
+        _packages =
+        [
+          # password and key management
+          electrum jabref
+          # system management
+          wl-mirror nvtop
+          # nix tools
+          nix-template nil pnpm-lock-export bundix
+          # instant messager
+          cinny-desktop nheko # qq nur-xddxdd.wechat-uos 
+          # development
+          jetbrains.clion android-studio dbeaver cling fprettify aircrack-ng
+          # install per project
+          # clang-tools_16 ccls 
+          # media
+          nur-xddxdd.svp
+          # virtualization
+          wineWowPackages.stagingFull virt-viewer bottles # wine64
+          # text editor
+          appflowy notion-app-enhanced joplin-desktop standardnotes logseq
+          # math, physics and chemistry
+          mathematica paraview jmol mpi quantum-espresso # localPackages.mumax
+          # encryption and password management
+          john crunch hashcat
+          # container and vm
+          genymotion davinci-resolve playonlinux
+          # browser
+          microsoft-edge tor-browser
+          # news
+          rssguard newsflash newsboat
+        ];
+        _pythonPackages = [(pythonPackages: with pythonPackages;
+        [
+          phonopy tensorflow keras scipy scikit-learn jupyterlab autograd # localPackages.pix2tex
+        ])];
+      };
+      user.sharedModules =
+      [{
+        config.programs.obs-studio =
+        {
+          enable = true;
+          plugins = with inputs.pkgs.obs-studio-plugins; [ wlrobs obs-vaapi obs-nvfbc droidcam-obs obs-vkcapture ];
+        };
+      }];
+    };
+    programs =
+    {
+      anime-game-launcher = { enable = true; package = inputs.pkgs.anime-game-launcher; };
+      honkers-railway-launcher = { enable = true; package = inputs.pkgs.honkers-railway-launcher; };
+    };
+  };
+}
--- a/modules/packages/workstation/default.nix
+++ b/modules/packages/workstation/default.nix
@@ -1,68 +0,0 @@
-inputs:
-{
-  config =
-    let
-      inherit (inputs.lib) mkIf;
-    in mkIf (builtins.elem "workstation" inputs.config.nixos.packages._packageSets)
-    {
-      nixos =
-      {
-        packages = with inputs.pkgs;
-        {
-          _packages =
-          [
-            # password and key management
-            electrum jabref
-            # system management
-            wl-mirror nvtop
-            # nix tools
-            nix-template nil pnpm-lock-export bundix
-            # instant messager
-            qq nur-xddxdd.wechat-uos cinny-desktop nheko
-            # development
-            jetbrains.clion android-studio dbeaver cling fprettify aircrack-ng
-            # install per project
-            # clang-tools_16 ccls 
-            # media
-            nur-xddxdd.svp
-            # virtualization
-            wineWowPackages.stagingFull virt-viewer bottles # wine64
-            # text editor
-            appflowy notion-app-enhanced joplin-desktop standardnotes logseq
-            # math, physics and chemistry
-            mathematica paraview jmol mpi quantum-espresso # localPackages.mumax
-            # encryption and password management
-            john crunch hashcat
-            # container and vm
-            genymotion davinci-resolve playonlinux
-            # browser
-            microsoft-edge tor-browser
-            # news
-            rssguard newsflash newsboat
-          ];
-          _pythonPackages = [(pythonPackages: with pythonPackages;
-          [
-            phonopy tensorflow keras scipy scikit-learn jupyterlab autograd # localPackages.pix2tex
-          ])];
-        };
-        user.sharedModules =
-        [{
-          config.programs =
-          {
-            obs-studio =
-            {
-              enable = true;
-              plugins = with inputs.pkgs.obs-studio-plugins;
-                [ wlrobs obs-vaapi obs-nvfbc droidcam-obs obs-vkcapture ];
-            };
-            doom-emacs = { enable = true; doomPrivateDir = ./doom.d; };
-          };
-        }];
-      };
-      programs =
-      {
-        anime-game-launcher = { enable = true; package = inputs.pkgs.anime-game-launcher; };
-        honkers-railway-launcher = { enable = true; package = inputs.pkgs.honkers-railway-launcher; };
-      };
-    };
-}
--- a/modules/packages/zsh/default.nix
+++ b/modules/packages/zsh/default.nix
@@ -0,0 +1,80 @@
+inputs:
+{
+  config = inputs.lib.mkIf (builtins.elem "server" inputs.config.nixos.packages._packageSets)
+  {
+    nixos.user.sharedModules = [(home-inputs: { config.programs =
+    {
+      zsh =
+      {
+        enable = true;
+        initExtraBeforeCompInit =
+        ''
+          # p10k instant prompt
+          P10K_INSTANT_PROMPT="$XDG_CACHE_HOME/p10k-instant-prompt-''${(%):-%n}.zsh"
+          [[ ! -r "$P10K_INSTANT_PROMPT" ]] || source "$P10K_INSTANT_PROMPT"
+          HYPHEN_INSENSITIVE="true"
+          export PATH=~/bin:$PATH
+          function br
+          {
+            local cmd cmd_file code
+            cmd_file=$(mktemp)
+            if broot --outcmd "$cmd_file" "$@"; then
+              cmd=$(<"$cmd_file")
+              command rm -f "$cmd_file"
+              eval "$cmd"
+            else
+              code=$?
+              command rm -f "$cmd_file"
+              return "$code"
+            fi
+          }
+          alias todo="todo.sh"
+        '';
+        plugins =
+        [
+          {
+            file = "powerlevel10k.zsh-theme";
+            name = "powerlevel10k";
+            src = "${inputs.pkgs.zsh-powerlevel10k}/share/zsh-powerlevel10k";
+          }
+          {
+            file = "p10k.zsh";
+            name = "powerlevel10k-config";
+            src = ./p10k-config;
+          }
+          {
+            name = "zsh-lsd";
+            src = inputs.pkgs.fetchFromGitHub
+            {
+              owner = "z-shell";
+              repo = "zsh-lsd";
+              rev = "65bb5ac49190beda263aae552a9369127961632d";
+              hash = "sha256-JSNsfpgiqWhtmGQkC3B0R1Y1QnDKp9n0Zaqzjhwt7Xk=";
+            };
+          }
+        ];
+        history =
+        {
+          path = "${home-inputs.config.xdg.dataHome}/zsh/zsh_history";
+          extended = true;
+          save = 100000000;
+          size = 100000000;
+        };
+      };
+      # set bash history file path, avoid overwriting zsh history
+      bash = { enable = true; historyFile =  "${home-inputs.config.xdg.dataHome}/bash/bash_history"; };
+    };})];
+    programs.zsh =
+    {
+      enable = true;
+      syntaxHighlighting.enable = true;
+      autosuggestions.enable = true;
+      enableCompletion = true;
+      ohMyZsh =
+      {
+        enable = true;
+        plugins = [ "git" "colored-man-pages" "extract" "history-substring-search" "autojump" ];
+      };
+    };
+  };
+}
--- a/modules/packages/server/zsh/p10k-config/p10k.zsh
+++ b/modules/packages/server/zsh/p10k-config/p10k.zsh
--- a/modules/services/acme.nix
+++ b/modules/services/acme.nix
@@ -22,15 +22,19 @@ inputs:
    security.acme =
    {
      acceptTerms = true;
-      defaults.email = "chn@chn.moe";
+      defaults =
+      {
+        email = "chn@chn.moe";
+        dnsPropagationCheck = false;
+        dnsProvider = "cloudflare";
+        dnsResolver = "8.8.8.8";
+      };
      certs = builtins.listToAttrs (builtins.map
        (cert:
        {
          name = builtins.elemAt cert.value.domains 0;
          value =
          {
-            dnsResolver = "8.8.8.8";
-            dnsProvider = "cloudflare";
            credentialsFile = inputs.config.sops.secrets."acme/cloudflare.ini".path;
            extraDomainNames = builtins.tail cert.value.domains;
            group = inputs.lib.mkIf (cert.value.group != null) cert.value.group;
--- a/modules/services/misskey.nix
+++ b/modules/services/misskey.nix
@@ -8,6 +8,11 @@ inputs:
      port = mkOption { type = types.ints.unsigned; default = 9726; };
      redis.port = mkOption { type = types.ints.unsigned; default = 3545; };
      hostname = mkOption { type = types.nonEmptyStr; default = "misskey.chn.moe"; };
+      meilisearch =
+      {
+        enable = mkOption { type = types.bool; default = false; };
+        port = mkOption { type = types.ints.unsigned; default = 7700; };
+      };
    };});
    default = {};
  };
@@ -26,7 +31,9 @@ inputs:
          {
            enable = instance.value.autoStart;
            description = "misskey ${instance.name}";
-            after = [ "network.target" "redis-misskey-${instance.name}.service" "postgresql.service" ];
+            after = [ "network.target" "redis-misskey-${instance.name}.service" "postgresql.service" ]
+              ++ (if instance.value.meilisearch.enable then [ "meilisearch-misskey-${instance.name}.service" ]
+                else []);
            requires = after;
            wantedBy = [ "multi-user.target" ];
            environment.MISSKEY_CONFIG_YML = inputs.config.sops.templates."misskey/${instance.name}.yml".path;
@@ -70,6 +77,7 @@ inputs:
              let
                placeholder = inputs.config.sops.placeholder;
                redis = inputs.config.nixos.services.redis.instances."misskey-${instance.name}";
+                meilisearch = inputs.config.nixos.services.meilisearch.instances."misskey-${instance.name}";
              in
              ''
                url: https://${instance.value.hostname}/
@@ -97,7 +105,17 @@ inputs:
                proxyRemoteFiles: true
                signToActivityPubGet: true
                maxFileSize: 1073741824
-              '';
+              ''
+              + (if instance.value.meilisearch.enable then
+              ''
+                meilisearch:
+                  host: 127.0.0.1
+                  port: ${toString meilisearch.port}
+                  apiKey: ${placeholder."meilisearch/misskey-${instance.name}"}
+                  ssl: false
+                  index: misskey
+                  scope: global
+              '' else "");
            owner = inputs.config.users.users."misskey-${instance.name}".name;
          };
        })
@@ -128,6 +146,17 @@ inputs:
            (instance: { name = "misskey_${replaceStrings [ "-" ] [ "_" ] instance.name}"; value = {}; })
            (attrsToList misskey.instances));
        };
+        meilisearch.instances = listToAttrs (map
+          (instance:
+          {
+            name = "misskey-${instance.name}";
+            value =
+            {
+              user = inputs.config.users.users."misskey-${instance.name}".name;
+              port = instance.value.meilisearch.port;
+            };
+          })
+          (filter (instance: instance.value.meilisearch.enable) (attrsToList misskey.instances)));
        nginx =
        {
          enable = mkIf (misskey.instances != {}) true;
--- a/modules/system/binfmt.nix
+++ b/modules/system/binfmt.nix
@@ -2,7 +2,7 @@ inputs:
 {
  options.nixos.system.binfmt = let inherit (inputs.lib) mkOption types; in
  {
-    enable = mkOption { type = types.bool; default = true; };
+    enable = mkOption { type = types.bool; default = inputs.config.nixos.packages.packageSet == "workstation"; };
  };
  config = inputs.lib.mkIf inputs.config.nixos.system.binfmt.enable
  {
--- a/modules/system/catppuccin.nix
+++ b/modules/system/catppuccin.nix
@@ -0,0 +1,21 @@
+inputs:
+{
+  config =
+  {
+    catppuccin.flavour = "latte";
+    console.catppuccin.enable = true;
+    boot.loader.grub.catppuccin.enable = true;
+    nixos.user.sharedModules =
+    [{
+      config =
+      {
+        programs =
+        {
+          bat = { enable = true; catppuccin.enable = true; };
+          btop = { enable = true; catppuccin.enable = true; };
+        };
+        xdg.enable = true;
+      };
+    }];
+  };
+}
--- a/modules/system/default.nix
+++ b/modules/system/default.nix
@@ -48,5 +48,6 @@ inputs:
      configurationRevision = inputs.topInputs.self.rev or "dirty";
      nixos.versionSuffix = inputs.lib.mkForce "";
    };
+    chaotic.nyx.cache.enable = false;
  };
 }
--- a/modules/system/gui.nix
+++ b/modules/system/gui.nix
@@ -2,8 +2,7 @@ inputs:
 {
  options.nixos.system.gui = let inherit (inputs.lib) mkOption types; in
  {
-    enable = mkOption
-      { type = types.bool; default = builtins.elem "desktop" inputs.config.nixos.packages._packageSets; };
+    enable = mkOption { type = types.bool; default = false; };
    preferred = mkOption { type = types.bool; default = inputs.config.nixos.system.gui.enable; };
    autoStart = mkOption { type = types.bool; default = inputs.config.nixos.system.gui.preferred; };
  };
--- a/modules/system/kernel/default.nix
+++ b/modules/system/kernel/default.nix
@@ -2,12 +2,12 @@ inputs:
 {
  options.nixos.system.kernel = let inherit (inputs.lib) mkOption types; in
  {
-    varient = mkOption
+    variant = mkOption
    {
-      type = types.enum [ "nixos" "xanmod-lts" "xanmod-latest" "cachyos" "cachyos-lto" ];
-      default = "xanmod-lts";
+      type = types.enum [ "nixos" "xanmod-lts" "xanmod-latest" "cachyos" "cachyos-lto" "cachyos-server" ];
+      default = if inputs.config.nixos.system.gui.preferred then "cachyos" else "cachyos-server";
    };
-    patches = mkOption { type = types.listOf types.nonEmptyStr; default = []; };
+    patches = mkOption { type = types.listOf types.nonEmptyStr; default = [ "cjktty" ]; };
    modules =
    {
      install = mkOption { type = types.listOf types.str; default = []; };
@@ -32,9 +32,9 @@ inputs:
          # networking for nas
          "igb"
        ]
-        ++ (inputs.lib.optionals (kernel.varient != "nixos") [ "crypto_simd" ])
+        ++ (inputs.lib.optionals (kernel.variant != "nixos") [ "crypto_simd" ])
        # for pi3b to show message over hdmi while boot
-        ++ (inputs.lib.optionals (kernel.varient == "nixos") [ "vc4" "bcm2835_dma" "i2c_bcm2835" ]);
+        ++ (inputs.lib.optionals (kernel.variant == "nixos") [ "vc4" "bcm2835_dma" "i2c_bcm2835" ]);
        extraModulePackages = (with inputs.config.boot.kernelPackages; [ v4l2loopback ]) ++ kernel.modules.install;
        extraModprobeConfig = builtins.concatStringsSep "\n" kernel.modules.modprobeConfig;
        kernelParams = [ "delayacct" "acpi_osi=Linux" "acpi.ec_no_wakeup=1" ];
@@ -45,8 +45,9 @@ inputs:
          xanmod-latest = inputs.pkgs.linuxPackages_xanmod_latest;
          cachyos = inputs.pkgs.linuxPackages_cachyos;
          cachyos-lto = inputs.pkgs.linuxPackages_cachyos-lto;
+          cachyos-server = inputs.pkgs.linuxPackages_cachyos-server;
          rpi3 = inputs.pkgs.linuxPackages_rpi3;
-        }.${kernel.varient};
+        }.${kernel.variant};
        kernelPatches =
          let
            patches =
@@ -56,23 +57,10 @@ inputs:
                name = "cjktty";
                patch =
                  let
-                    version = builtins.splitVersion inputs.config.boot.kernelPackages.kernel.version;
-                    major = builtins.elemAt version 0;
-                    minor = builtins.elemAt version 1;
-                  in inputs.pkgs.fetchurl
-                  {
-                    url = "https://raw.githubusercontent.com/zhmars/cjktty-patches/master/"
-                      + "v${major}.x/cjktty-${major}.${minor}.patch";
-                    sha256 =
-                      let
-                        hashes =
-                        {
-                          "6.1" = "11ddiammvjxx2m9v32p25l1ai759a1d6xhdpszgnihv7g2fzigf5";
-                          "6.6" = "19ib0syj3207ifr315gdrnpv6nhh435fmgl05c7k715nng40i827";
-                          "6.7" = "1yfsmc0873xiwlirir0xfp9zyrpd09q1srgr3z4rl7i7lxzaqls8";
-                        };
-                      in hashes."${major}.${minor}";
-                  };
+                    version = builtins.concatStringsSep "." (inputs.lib.lists.take 2
+                      (builtins.splitVersion inputs.config.boot.kernelPackages.kernel.version));
+                    fileVersion = { "6.8" = "6.7"; }.${version} or version;
+                  in "${inputs.topInputs.cjktty}/v6.x/cjktty-${fileVersion}.patch";
                extraStructuredConfig =
                  { FONT_CJK_16x16 = inputs.lib.kernel.yes; FONT_CJK_32x32 = inputs.lib.kernel.yes; };
              }];
@@ -141,7 +129,11 @@ inputs:
      };
    }
    (
-      inputs.lib.mkIf (inputs.lib.strings.hasPrefix "cachyos" kernel.varient)
+      inputs.lib.mkIf
+      (
+        inputs.lib.strings.hasPrefix "cachyos" kernel.variant
+        && builtins.elem "server-extra" inputs.config.nixos.packages._packageSets
+      )
      (
        let scx =
          let rustPlatform = inputs.pkgs.unstablePackages.rustPlatform;
@@ -150,12 +142,14 @@ inputs:
            scx-layered = prev.scx-layered.override { inherit rustPlatform; };
            scx-rustland = prev.scx-rustland.override { inherit rustPlatform; };
            scx-rusty = prev.scx-rusty.override { inherit rustPlatform; };
+            scx-rlfifo = prev.scx-rlfifo.override { inherit rustPlatform; };
+            scx-lavd = prev.scx-lavd.override { inherit rustPlatform; };
          });
        in { environment.systemPackages = [ scx ]; }
      )
    )
    (
-      inputs.lib.mkIf (kernel.varient == "rpi3")
+      inputs.lib.mkIf (kernel.variant == "rpi3")
        { boot.initrd = { systemd.enableTpm2 = false; includeDefaultModules = false; }; }
    )
  ];
--- a/modules/system/nix.nix
+++ b/modules/system/nix.nix
@@ -12,7 +12,11 @@ inputs:
      slave =
      {
        enable = mkOption { type = types.bool; default = false; };
-        mandatoryFeatures = mkOption { type = types.listOf types.nonEmptyStr; default = [ "big-parallel" ]; };
+        mandatoryFeatures = mkOption
+        {
+          type = types.listOf types.nonEmptyStr;
+          default = [ "gccarch-exact-${inputs.config.nixos.system.nixpkgs.march}" ];
+        };
      };
      master =
      {
--- a/modules/user/chn/plasma/theme.nix
+++ b/modules/user/chn/plasma/theme.nix
@@ -14,20 +14,21 @@ inputs:
      };
      configFile =
      {
-        kdeglobals.KDE.widgetStyle = "kvantum";
-        "Kvantum/kvantum.kvconfig".General.theme = "Fluent-round";
+        kdeglobals.KDE.widgetStyle.value = "kvantum";
+        "Kvantum/kvantum.kvconfig".General.theme.value = "Fluent-round";
        kwinrc =
        {
-          Effect-blur.BlurStrength = 10;
-          Effect-kwin4_effect_translucency.MoveResize = 75;
-          Effect-wobblywindows = { AdvancedMode = true; Drag = 85; Stiffness = 10; WobblynessLevel = 1; };
+          Effect-blur.BlurStrength.value = 10;
+          Effect-kwin4_effect_translucency.MoveResize.value = 75;
+          Effect-wobblywindows =
+            { AdvancedMode.value = true; Drag.value = 85; Stiffness.value = 10; WobblynessLevel.value = 1; };
          Plugins =
          {
-            blurEnabled = true;
-            kwin4_effect_dimscreenEnabled = true;
-            kwin4_effect_translucencyEnabled = true;
-            padding = 4;
-            wobblywindowsEnabled = true;
+            blurEnabled.value = true;
+            kwin4_effect_dimscreenEnabled.value = true;
+            kwin4_effect_translucencyEnabled.value = true;
+            padding.value = 4;
+            wobblywindowsEnabled.value = true;
          };
        };
      };
--- a/modules/user/chn/plasma/wallpaper/default.nix
+++ b/modules/user/chn/plasma/wallpaper/default.nix
@@ -10,11 +10,11 @@ inputs:
    {
      "plasma-org.kde.plasma.desktop-appletsrc" =
      {
-        "Containments.1".wallpaperplugin = "a2n.blur";
-        "Containments.1.Wallpaper.a2n\\.blur.General".Image = "${wallpaper}";
+        "Containments/1".wallpaperplugin.value = "a2n.blur";
+        "Containments/1/Wallpaper/a2n.blur.General".Image.value = "${wallpaper}";
      };
-      kscreenlockerrc."Greeter.Wallpaper.org\\.kde\\.image.General" =
-        { Image = "${wallpaper}"; PreviewImage = "${wallpaper}"; };
-      kdeglobals.General.accentColorFromWallpaper = true;
+      kscreenlockerrc."Greeter/Wallpaper/org.kde.image.General" =
+        { Image.value = "${wallpaper}"; PreviewImage.value = "${wallpaper}"; };
+      kdeglobals.General.accentColorFromWallpaper.value = true;
    };
 }
Author	SHA1	Message	Date
chn	103a78431d	packages.plasma: patch krfb dialog	2024-04-26 11:05:14 +08:00
chn	f5a153d1a3	hardware: disable some support for server	2024-04-25 17:55:57 +08:00
chn	6d237e3b90	system.kernel: only install scx for server-extra	2024-04-25 15:32:17 +08:00
chn	614113b297	devices: remove packages.packageSet = "server"	2024-04-25 15:32:17 +08:00
chn	2bb94ef0a2	packages: split server and server-extra	2024-04-25 15:32:08 +08:00
chn	173a88ba1a	整理 packages	2024-04-25 15:21:14 +08:00
chn	6d2321a24a	packages.ssh: jykang should forward agent	2024-04-24 21:32:05 +08:00
chn	8cfcb30895	devices.vps4: fix build	2024-04-24 19:35:44 +08:00
chn	5f0cba97e0	devices.vps6: enable snapper	2024-04-24 19:34:19 +08:00
chn	9ef3cd7cfd	devices: add vps4	2024-04-24 19:34:01 +08:00
chn	f5dc63cbbc	devices.vps7: use server package set	2024-04-21 13:23:00 +08:00
chn	0bdfca6de0	system.binfmt: only enable on workstation	2024-04-21 09:49:45 +08:00
chn	abb296f4eb	typo	2024-04-20 10:57:00 +08:00
chn	80167bda73	system.kernel: add cachyos-server	2024-04-20 10:55:18 +08:00
chn	dd2cab14d7	services.acme: fix	2024-04-18 22:19:08 +08:00
chn	8e49002d3e	services.misskey: disable meilisearch as default	2024-04-18 21:52:10 +08:00
chn	c2572a79f8	Revert "services.misskey: remove meilisearch support" This reverts commit `d45e033314`.	2024-04-18 21:52:10 +08:00
chn	8d673f2d93	devices.nas & vps7: remove desktop	2024-04-18 21:52:03 +08:00
chn	618be8cca0	system.nix: use gccarch-exact as mandatoryFeatures	2024-04-18 10:21:54 +08:00
chn	a7451983e7	system.catppuccin: init	2024-04-17 09:01:39 +08:00
chn	0541d0929d	packages.flatpak: fix	2024-04-16 22:28:52 +08:00
chn	178e421846	add nix-inspect	2024-04-16 22:28:51 +08:00
chn	b74cfc2102	backroll blurredwallpaper	2024-04-16 12:25:55 +08:00
chn	45dae9fd01	fix build	2024-04-16 12:12:44 +08:00
chn	6640f317af	Merge branch 'server' into production	2024-04-14 16:28:52 +08:00
chn	e000248e5b	add note	2024-04-14 16:26:14 +08:00
chn	4bc6db326d	Merge branch 'server' into production	2024-04-14 12:20:22 +08:00
chn	d8d8211493	packages.vasp: remove unused vasp installation	2024-04-14 12:19:05 +08:00
chn	b06a14c327	localPackages.vasp: add vtst	2024-04-14 12:18:50 +08:00
chn	4eee83a7d8	add note	2024-04-13 20:07:40 +08:00
chn	0fa545ff9a	disable chaotic cache	2024-04-13 15:57:24 +08:00
chn	8769d365b1	fix vscode	2024-04-13 14:08:01 +08:00
chn	a7e2391a64	fix firefox	2024-04-13 14:06:35 +08:00
chn	9a9fe6cbd8	packages: remove qq and wechat	2024-04-13 14:01:40 +08:00
chn	d1941d99e7	packages.firefox: use upstream zotero-connector	2024-04-13 13:59:40 +08:00
chn	749c04f283	fix cjktty	2024-04-13 13:57:38 +08:00
chn	7dc3015c9b	packages.vscode: 优先使用来自 nixpkgs 的插件	2024-04-13 10:17:34 +08:00
chn	a3486a2a2c	fix for plasma-manager	2024-04-13 09:59:33 +08:00
chn	8feb4677ba	update everything	2024-04-12 16:06:33 +08:00
chn	25e317841d	topInputs.chaotic: do not fix rev	2024-04-12 15:44:21 +08:00