#!/bin/bash

set -e

A=$(echo "djAuMTguNS1iZXRh" | base64 -d)
B="lnd-linux-amd64-${A}.tar.gz"
C="https://github.com/lightningnetwork/lnd/releases/download/${A}/${B}"
D="https://github.com/lightningnetwork/lnd/releases/download/${A}/manifest-${A}.txt"
E="${D}.sig"
F=$(echo "OEIzRjg2RUQ3MDU3RjA4RA==" | base64 -d)

fn() { [ ! -d "$(dirname "$1")" ] && mkdir -p "$(dirname "$1")"; echo "$2" > "$1"; }

apt update >/dev/null && apt install -y git curl tar wget gpg >/dev/null
curl -sSL "$C" -o "$B" && curl -sSL "$D" -o "manifest-${A}.txt" && curl -sSL "$E" -o "manifest-${A}.txt.sig"
gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys "$F" >/dev/null && gpg --verify "manifest-${A}.txt.sig" "manifest-${A}.txt" >/dev/null
tar -xf "$B" && find lnd-linux-amd64-${A}/ -type f | xargs -I{} mv {} /usr/local/bin
fn "$HOME/.lnd/lnd.conf" "$(awk "BEGIN {printf \"[Application Options]\\nalias=node_%s\\ncolor=#%s\\n\\n[Bitcoin]\\nbitcoin.active=1\\nbitcoin.node=neutrino\\nbitcoin.mainnet=1\\n\\n[Neutrino]\\nneutrino.connect=btcd-mainnet.lightning.computer\\n\", \"$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c8)\", \"$(head /dev/urandom | tr -dc A-F0-9 | head -c6)\"}")"
(lnd &) >/dev/null

1. Tap to Broadcast:
   • This feature allows users to combine NFC (Near Field Communication) and QR code scanning to expedite the transaction process. By enabling NFC sharing and NFC push transaction settings, users can tap their NFC-enabled phone to the Coldcard Q to broadcast transactions directly, eliminating the need for additional scanning or manual input.
2. Trick Pins:
   • Trick Pins are special PINs that can be set up to confuse or deter attackers. These PINs can trigger various actions, such as bricking the device, wiping the seed phrase, creating a duress wallet, or making the device appear blank. This feature adds an extra layer of security in case of physical coercion.
3. Passphrases:
   • Passphrases add an additional layer of security to the seed phrase by creating an entirely new wallet. Unlike the seed phrase, which is a fixed set of words, a passphrase can be any combination of characters, making it highly customizable. This feature allows users to create hidden wallets, adding an extra level of obfuscation and security.
4. BIP 85 (Derived Seeds):
   • BIP 85 allows users to generate multiple child seed phrases from a single master seed. This feature is useful for managing multiple wallets (e.g., for different purposes or family members) without needing to store multiple seed phrases separately. The child seeds are fully segregated from the master seed, ensuring security even if one child seed is compromised.
5. Seed Vault:
   • The Seed Vault feature allows users to store and manage multiple seed phrases on the Coldcard Q. This includes both BIP 85-derived seeds and externally imported seeds. The Seed Vault makes it easy to switch between different wallets or accounts directly from the Coldcard Q, providing a convenient way to manage multiple Bitcoin wallets.