From 731583bcd5db559cb686ba97c494e425255aed98 Mon Sep 17 00:00:00 2001
From: Maxiem Geldhof <author@maxiemgeldhof.com>
Date: Fri, 31 Oct 2025 16:29:03 +0100
Subject: [PATCH] Replace ren

---
 flake.nix                |  3 +++
 keys/wg-ren              |  9 ---------
 keys/wg-ren.pub          |  1 -
 systems/ren/hardware.nix | 14 ++++++++++++++
 systems/ren/system.nix   | 31 +++++++++++++++++++++++++++++++
 systems/ren/users.nix    | 26 ++++++++++++++++++++++++++
 6 files changed, 74 insertions(+), 10 deletions(-)
 delete mode 100644 keys/wg-ren
 delete mode 100644 keys/wg-ren.pub
 create mode 100644 systems/ren/hardware.nix
 create mode 100644 systems/ren/system.nix
 create mode 100644 systems/ren/users.nix

diff --git a/flake.nix b/flake.nix
index 013a23e..1667b77 100644
--- a/flake.nix
+++ b/flake.nix
@@ -26,11 +26,14 @@
       macbook = import ./systems/macbook/macbook.nix inputs;
 
       selene = import ./systems/selene/system.nix inputs;
+
+      ren = import ./systems/ren/system.nix inputs;
     in
     {
       # Build darwin flake using:
       # $ darwin-rebuild build --flake .#Maxiems-MacBook-Pro
       darwinConfigurations."Maxiems-MacBook-Pro" = macbook;
       nixosConfigurations.selene = selene;
+      nixosConfigurations.ren = ren;
     };
 }
diff --git a/keys/wg-ren b/keys/wg-ren
deleted file mode 100644
index 0b802c5..0000000
--- a/keys/wg-ren
+++ /dev/null
@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 M7OTMg Hkh55d8H9zcKmJdDIU1B5MAwd/5SO3t82kXwz6HhTCM
-ezDoDh7C8lp3EplRKMELvFgB7boUcDqy5ZL9YZ4Sbfk
--> ssh-ed25519 CJLJQg VWtzsyADFT/AdqigUILj5IJiZATIiuLF6/aSp5vqyyI
-hA5J4cRSCKMANvlxSw1gvHSeOz1fr98PKZmLbT19Bks
---- 9VDB4Q2hkMFs1n5wwUDgLhKoBETEerbyJvlilu9VeTU
-���dYW�L.���X��ms%
-0�
8�@��
-6N�jÙi��ύ�]�u��jԻs�'��<�M�o�Y+`��q�(U��
\ No newline at end of file
diff --git a/keys/wg-ren.pub b/keys/wg-ren.pub
deleted file mode 100644
index c183803..0000000
--- a/keys/wg-ren.pub
+++ /dev/null
@@ -1 +0,0 @@
-wvTFERFXOPcgziLtLtfF3LGv5zmBWikCy/yLRwSuxWA=
diff --git a/systems/ren/hardware.nix b/systems/ren/hardware.nix
new file mode 100644
index 0000000..496c286
--- /dev/null
+++ b/systems/ren/hardware.nix
@@ -0,0 +1,14 @@
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+  boot.loader.grub = {
+    efiSupport = true;
+    efiInstallAsRemovable = true;
+    device = "nodev";
+  };
+  fileSystems."/boot" = { device = "/dev/disk/by-uuid/0683-2D32"; fsType = "vfat"; };
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  boot.initrd.kernelModules = [ "nvme" ];
+  fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
+  system.stateVersion = "23.11";
+}
diff --git a/systems/ren/system.nix b/systems/ren/system.nix
new file mode 100644
index 0000000..2eea905
--- /dev/null
+++ b/systems/ren/system.nix
@@ -0,0 +1,31 @@
+{
+  agenix,
+  jellyfin-exporter,
+  nixpkgs,
+  self,
+  ...
+}:
+let
+  system = "x86_64-linux";
+in
+nixpkgs.lib.nixosSystem {
+  system = system;
+  specialArgs = {
+    # This selects the package for the current system and passes it
+    exporter-pkg = jellyfin-exporter.packages.${system}.default;
+    system = system;
+  };
+
+  modules = [
+    {
+      boot.tmp.cleanOnBoot = true;
+      zramSwap.enable = true;
+      networking.hostName = "Ren";
+      networking.domain = "";
+      services.openssh.enable = true;
+    }
+    ./users.nix
+    ./hardware.nix
+    agenix.nixosModules.default
+  ];
+}
diff --git a/systems/ren/users.nix b/systems/ren/users.nix
new file mode 100644
index 0000000..4487e23
--- /dev/null
+++ b/systems/ren/users.nix
@@ -0,0 +1,26 @@
+{
+  users.users.ren = {
+    isNormalUser = true;
+    home = "/home/ren";
+    hashedPassword = "$y$j9T$KjOwguW/7P9GvbNg6Yy.k/$8xf3aqnJ909HSjxtpe854RKdiXiPpbOLt.aiuJSfeC0";
+    openssh.authorizedKeys.keys = [
+      (builtins.readFile ../../keys/hetzner.pub)
+      (builtins.readFile ../../keys/asus.pub)
+      (builtins.readFile ../../keys/macbook.pub)
+    ];
+
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+    ];
+  };
+
+  age.secrets.hetzner-key = {
+    file = ../../keys/hetzner.priv;
+    owner = "ren";
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = [
+      (builtins.readFile ../../keys/hetzner.pub)
+    ];
+}