From 48143906d5122cba5cb4659794942e8e9dfffb34 Mon Sep 17 00:00:00 2001
From: Maxiem Geldhof <author@maxiemgeldhof.com>
Date: Thu, 23 Oct 2025 15:59:40 +0200
Subject: [PATCH] Add ren wg

---
 keys/secrets.nix                                     | 1 +
 keys/wg-ren                                          | 9 +++++++++
 keys/wg-ren.pub                                      | 1 +
 modules/servermodules/wireguard/wireguard-server.nix | 4 ++++
 4 files changed, 15 insertions(+)
 create mode 100644 keys/wg-ren
 create mode 100644 keys/wg-ren.pub

diff --git a/keys/secrets.nix b/keys/secrets.nix
index a33444d..c5712f9 100644
--- a/keys/secrets.nix
+++ b/keys/secrets.nix
@@ -11,4 +11,5 @@ in
   "wg-selene".publicKeys = macbook ++ selene ++ master;
   "wg-macbook".publicKeys = macbook ++ master;
   "hetzner.priv".publicKeys = macbook ++ selene ++ master;
+  "wg-ren".publicKeys = macbook++master;
 }
\ No newline at end of file
diff --git a/keys/wg-ren b/keys/wg-ren
new file mode 100644
index 0000000..0b802c5
--- /dev/null
+++ b/keys/wg-ren
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 M7OTMg Hkh55d8H9zcKmJdDIU1B5MAwd/5SO3t82kXwz6HhTCM
+ezDoDh7C8lp3EplRKMELvFgB7boUcDqy5ZL9YZ4Sbfk
+-> ssh-ed25519 CJLJQg VWtzsyADFT/AdqigUILj5IJiZATIiuLF6/aSp5vqyyI
+hA5J4cRSCKMANvlxSw1gvHSeOz1fr98PKZmLbT19Bks
+--- 9VDB4Q2hkMFs1n5wwUDgLhKoBETEerbyJvlilu9VeTU
+���dYW�L.���X��ms%
+0�
8�@��
+6N�jÙi��ύ�]�u��jԻs�'��<�M�o�Y+`��q�(U��
\ No newline at end of file
diff --git a/keys/wg-ren.pub b/keys/wg-ren.pub
new file mode 100644
index 0000000..c183803
--- /dev/null
+++ b/keys/wg-ren.pub
@@ -0,0 +1 @@
+wvTFERFXOPcgziLtLtfF3LGv5zmBWikCy/yLRwSuxWA=
diff --git a/modules/servermodules/wireguard/wireguard-server.nix b/modules/servermodules/wireguard/wireguard-server.nix
index 96cbfb4..0e9144b 100644
--- a/modules/servermodules/wireguard/wireguard-server.nix
+++ b/modules/servermodules/wireguard/wireguard-server.nix
@@ -54,6 +54,10 @@ in
           peers = [
             # List of allowed peers.
             (import ../../../systems/macbook/wireguard.nix).peerConfig
+            {
+              publicKey = (builtins.readFile ../../../keys/wg-ren.pub);
+              allowedIPs = [ "10.100.0.3/32" ];
+            }
           ];
         };
       };