Add ren wg

keys/secrets.nix

@@ -11,4 +11,5 @@ in
   "wg-selene".publicKeys = macbook ++ selene ++ master;
   "wg-macbook".publicKeys = macbook ++ master;
   "hetzner.priv".publicKeys = macbook ++ selene ++ master;
+  "wg-ren".publicKeys = macbook++master;
 }

keys/wg-ren

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 M7OTMg Hkh55d8H9zcKmJdDIU1B5MAwd/5SO3t82kXwz6HhTCM
+ezDoDh7C8lp3EplRKMELvFgB7boUcDqy5ZL9YZ4Sbfk
+-> ssh-ed25519 CJLJQg VWtzsyADFT/AdqigUILj5IJiZATIiuLF6/aSp5vqyyI
+hA5J4cRSCKMANvlxSw1gvHSeOz1fr98PKZmLbT19Bks
+--- 9VDB4Q2hkMFs1n5wwUDgLhKoBETEerbyJvlilu9VeTU
+ïê†ðdYWÛL.¤üØX©ïms%
+0ê
8½@‘ì±
+6NòjÙiõºÏ<EFBFBD>ÿ]ÏuþÅjÔ»s¶'ôÚ<ãM—oâY+`¥Ëqþ(UÐÏ

keys/wg-ren.pub

@@ -0,0 +1 @@
+wvTFERFXOPcgziLtLtfF3LGv5zmBWikCy/yLRwSuxWA=

modules/servermodules/wireguard/wireguard-server.nix

@@ -54,6 +54,10 @@ in
           peers = [
             # List of allowed peers.
             (import ../../../systems/macbook/wireguard.nix).peerConfig
+            {
+              publicKey = (builtins.readFile ../../../keys/wg-ren.pub);
+              allowedIPs = [ "10.100.0.3/32" ];
+            }
           ];
         };
       };