From 80e374ebc6a833d2fdf40e473bd219c0eeb801e3 Mon Sep 17 00:00:00 2001
From: Nikolaos Karaolidis <nick@karaolidis.com>
Date: Thu, 29 May 2025 20:56:27 +0100
Subject: [PATCH] Add jupiter USB key

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
---
 hosts/jupiter/README.md            | 11 ++++++++++-
 hosts/jupiter/default.nix          |  7 +++++++
 hosts/jupiter/hardware/default.nix |  8 ++++++++
 3 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/hosts/jupiter/README.md b/hosts/jupiter/README.md
index d62e953..5c95a55 100644
--- a/hosts/jupiter/README.md
+++ b/hosts/jupiter/README.md
@@ -1,6 +1,15 @@
 # jupiter
 
-## Post-Install Checklist
+## Creating a USB key
+
+```sh
+sudo fdisk /dev/sdx
+# o, n, p, <enter>, <enter>, <enter>, t, b, w
+sudo mkfs.vfat -F 32 /dev/sdx1
+mkdir -p /mnt/luks
+sudo mount /dev/sdx1 /mnt/luks
+echo -n "key" | sudo tee /mnt/luks/keyfile
+```
 
 ## RAID Management
 
diff --git a/hosts/jupiter/default.nix b/hosts/jupiter/default.nix
index 4ae893c..441f637 100644
--- a/hosts/jupiter/default.nix
+++ b/hosts/jupiter/default.nix
@@ -38,6 +38,13 @@
   # TODO: DNS for .local
   networking.hostName = "jupiter";
 
+  boot.initrd = {
+    luks.devices.main.keyFile = "/usb/keyfile";
+    systemd.contents."/etc/fstab".text = ''
+      UUID=8E50-CD43 /usb vfat ro,umask=0377
+    '';
+  };
+
   # TODO: Enable
   # fileSystems."/mnt/storage" = {
   #   label = "storage";
diff --git a/hosts/jupiter/hardware/default.nix b/hosts/jupiter/hardware/default.nix
index c45a7a0..1806c64 100644
--- a/hosts/jupiter/hardware/default.nix
+++ b/hosts/jupiter/hardware/default.nix
@@ -56,6 +56,14 @@
       "ahci"
       "usbhid"
       "amdgpu"
+      "xhci_pci"
+      "usb_storage"
+      "usbcore"
+      "sd_mod"
+      "uas"
+      "vfat"
+      "nls_cp437"
+      "nls_iso8859_1"
     ];
   };