From 050a0b8c2371bcea03e7bd9f499dc28135a8e40d Mon Sep 17 00:00:00 2001
From: oqyude <oqyude@gmail.com>
Date: Sat, 26 Jul 2025 15:51:50 +0300
Subject: [PATCH] 123

---
 devices/server.nix              | 5 +++--
 devices/vds.nix                 | 2 +-
 modules/essentials/packages.nix | 4 ++++
 modules/vds/xray.nix            | 2 +-
 4 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/devices/server.nix b/devices/server.nix
index 0b5b0a0..29ee339 100755
--- a/devices/server.nix
+++ b/devices/server.nix
@@ -9,6 +9,7 @@ let
     }:
     {
       imports = with inputs; [
+        sops-nix.nixosModules.sops
         ./hardware/server.nix
         self.nixosModules.default
 
@@ -91,11 +92,11 @@ let
         power-profiles-daemon.enable = lib.mkForce false;
         earlyoom.enable = true;
         preload.enable = true;
-        auto-cpufreq.enable = true;
+        auto-cpufreq.enable = false;
         throttled.enable = true;
         journald = {
           extraConfig = ''
-            SystemMaxUse=128M
+            SystemMaxUse=512M
           '';
         };
         samba = {
diff --git a/devices/vds.nix b/devices/vds.nix
index 93a5ff2..2825db1 100755
--- a/devices/vds.nix
+++ b/devices/vds.nix
@@ -64,7 +64,7 @@ let
         throttled.enable = true;
         journald = {
           extraConfig = ''
-            SystemMaxUse=128M
+            SystemMaxUse=512M
           '';
         };
         samba = {
diff --git a/modules/essentials/packages.nix b/modules/essentials/packages.nix
index ac233d2..9f4d24a 100755
--- a/modules/essentials/packages.nix
+++ b/modules/essentials/packages.nix
@@ -6,6 +6,10 @@
 {
   environment = {
     systemPackages = with pkgs; [
+      # Encrypt
+      age
+      sops
+
       # Nix
       nix-diff
       nix-tree
diff --git a/modules/vds/xray.nix b/modules/vds/xray.nix
index dc46c0c..083eaf3 100755
--- a/modules/vds/xray.nix
+++ b/modules/vds/xray.nix
@@ -13,7 +13,7 @@
 
   networking.firewall = {
     allowedTCPPorts = [ 443 ];
-    allowedUDPPorts = [ 443 ]; #41641
+    allowedUDPPorts = [ 443 ]; # 41641
     #trustedInterfaces = [ "tailscale0" ];
   };