Ren key

systems/ren/hardware.nix

@@ -6,9 +6,25 @@
     efiInstallAsRemovable = true;
     device = "nodev";
   };
-  fileSystems."/boot" = { device = "/dev/disk/by-uuid/0683-2D32"; fsType = "vfat"; };
-  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/0683-2D32";
+    fsType = "vfat";
+  };
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "xen_blkfront"
+    "vmw_pvscsi"
+  ];
   boot.initrd.kernelModules = [ "nvme" ];
-  fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
+  fileSystems."/" = {
+    device = "/dev/sda1";
+    fsType = "ext4";
+  };
   system.stateVersion = "23.11";
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
 }

systems/ren/system.nix

@@ -23,6 +23,12 @@ nixpkgs.lib.nixosSystem {
       networking.hostName = "Ren";
       networking.domain = "";
       services.openssh.enable = true;
+      networking.firewall = {
+        enable = true;
+        allowedTCPPorts = [
+          22
+        ];
+      };
     }
     ./users.nix
     ./hardware.nix

systems/ren/users.nix

@@ -21,6 +21,8 @@
   };
 
   users.users.root.openssh.authorizedKeys.keys = [
-      (builtins.readFile ../../keys/hetzner.pub)
-    ];
+    (builtins.readFile ../../keys/hetzner.pub)
+  ];
+  age.identityPaths = [ "/home/ren/.ssh/id_ed25519" ];
+
 }