Replace ren

flake.nix

@@ -26,11 +26,14 @@
       macbook = import ./systems/macbook/macbook.nix inputs;
 
       selene = import ./systems/selene/system.nix inputs;
+
+      ren = import ./systems/ren/system.nix inputs;
     in
     {
       # Build darwin flake using:
       # $ darwin-rebuild build --flake .#Maxiems-MacBook-Pro
       darwinConfigurations."Maxiems-MacBook-Pro" = macbook;
       nixosConfigurations.selene = selene;
+      nixosConfigurations.ren = ren;
     };
 }

keys/wg-ren

@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 M7OTMg Hkh55d8H9zcKmJdDIU1B5MAwd/5SO3t82kXwz6HhTCM
-ezDoDh7C8lp3EplRKMELvFgB7boUcDqy5ZL9YZ4Sbfk
--> ssh-ed25519 CJLJQg VWtzsyADFT/AdqigUILj5IJiZATIiuLF6/aSp5vqyyI
-hA5J4cRSCKMANvlxSw1gvHSeOz1fr98PKZmLbT19Bks
---- 9VDB4Q2hkMFs1n5wwUDgLhKoBETEerbyJvlilu9VeTU
-ïê†ðdYWÛL.¤üØX©ïms%
-0ê
8½@‘ì±
-6NòjÙiõºÏ<EFBFBD>ÿ]ÏuþÅjÔ»s¶'ôÚ<ãM—oâY+`¥Ëqþ(UÐÏ

keys/wg-ren.pub

@@ -1 +0,0 @@
-wvTFERFXOPcgziLtLtfF3LGv5zmBWikCy/yLRwSuxWA=

systems/ren/hardware.nix

@@ -0,0 +1,14 @@
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+  boot.loader.grub = {
+    efiSupport = true;
+    efiInstallAsRemovable = true;
+    device = "nodev";
+  };
+  fileSystems."/boot" = { device = "/dev/disk/by-uuid/0683-2D32"; fsType = "vfat"; };
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  boot.initrd.kernelModules = [ "nvme" ];
+  fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; };
+  system.stateVersion = "23.11";
+}

systems/ren/system.nix

@@ -0,0 +1,31 @@
+{
+  agenix,
+  jellyfin-exporter,
+  nixpkgs,
+  self,
+  ...
+}:
+let
+  system = "x86_64-linux";
+in
+nixpkgs.lib.nixosSystem {
+  system = system;
+  specialArgs = {
+    # This selects the package for the current system and passes it
+    exporter-pkg = jellyfin-exporter.packages.${system}.default;
+    system = system;
+  };
+
+  modules = [
+    {
+      boot.tmp.cleanOnBoot = true;
+      zramSwap.enable = true;
+      networking.hostName = "Ren";
+      networking.domain = "";
+      services.openssh.enable = true;
+    }
+    ./users.nix
+    ./hardware.nix
+    agenix.nixosModules.default
+  ];
+}

systems/ren/users.nix

@@ -0,0 +1,26 @@
+{
+  users.users.ren = {
+    isNormalUser = true;
+    home = "/home/ren";
+    hashedPassword = "$y$j9T$KjOwguW/7P9GvbNg6Yy.k/$8xf3aqnJ909HSjxtpe854RKdiXiPpbOLt.aiuJSfeC0";
+    openssh.authorizedKeys.keys = [
+      (builtins.readFile ../../keys/hetzner.pub)
+      (builtins.readFile ../../keys/asus.pub)
+      (builtins.readFile ../../keys/macbook.pub)
+    ];
+
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+    ];
+  };
+
+  age.secrets.hetzner-key = {
+    file = ../../keys/hetzner.priv;
+    owner = "ren";
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = [
+      (builtins.readFile ../../keys/hetzner.pub)
+    ];
+}