diff --git a/hosts/servers/fluttershy.nix b/hosts/servers/fluttershy.nix
new file mode 100644
index 00000000..00f13dc5
--- /dev/null
+++ b/hosts/servers/fluttershy.nix
@@ -0,0 +1,27 @@
+{ pkgs, lib, config, ... }:
+
+{
+  imports = [ ../../hardware/virtualized.nix ];
+
+  networking.hostName = "fluttershy";
+
+  ocf.network = {
+    enable = true;
+    lastOctet = 130;
+  };
+
+  ocf.nfs = {
+    enable = true;
+    mountHome = true;
+    mountServices = true;
+  };
+
+  environment.systemPackages = with pkgs; [
+    ocf-utils
+    openldap
+    ldapvi
+    ipmitool
+  ];
+
+  system.stateVersion = "25.05";
+}
diff --git a/secrets/host-keys/fluttershy.pub b/secrets/host-keys/fluttershy.pub
new file mode 100644
index 00000000..2bf8d2e6
--- /dev/null
+++ b/secrets/host-keys/fluttershy.pub
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPm+RlDujsxQyxFTEOCTeImSBDvr63cL8Kg+rNrH6NK8 root@fluttershy
diff --git a/secrets/rekeyed/fluttershy/bb29ad9e3858d0011321597392ce04d9-root-password-hash.age b/secrets/rekeyed/fluttershy/bb29ad9e3858d0011321597392ce04d9-root-password-hash.age
new file mode 100644
index 00000000..30b47e7e
--- /dev/null
+++ b/secrets/rekeyed/fluttershy/bb29ad9e3858d0011321597392ce04d9-root-password-hash.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 queQQw iapx7/qRXSfyr+nCaIQFYBLw2zzD4Bu4XIXkXYoO7wo
+SeelBK2g9PafNVmf77iQuifueRAp3dv5rLmjAW5txYM
+-> :e-grease g]|E$z< 9S (}Fd:
+ZNMmGNjA
+--- WKcmHP5cZAWiUTnNk9xcH6SxrmEcE3DkyDJ3akj3TLc
+_'zú�¶:[\\FóH
»Mü¡eEǼ	ŽwÕìèØO‰CéíMÜŒv±†XÝ!Dƒƒ[—*fì»z|Ô±ƒÐ­€|&ÛP#öË:–²kÆ´€w«ö+¯/Òc^/‚™D‘|ƒ1Ê�
\ No newline at end of file
diff --git a/secrets/rekeyed/fluttershy/ce6c3bcbaefdb49e3b444ea1dba7dec1-tsig-secret.age b/secrets/rekeyed/fluttershy/ce6c3bcbaefdb49e3b444ea1dba7dec1-tsig-secret.age
new file mode 100644
index 00000000..7328add6
Binary files /dev/null and b/secrets/rekeyed/fluttershy/ce6c3bcbaefdb49e3b444ea1dba7dec1-tsig-secret.age differ