Extract Shared NixOS Settings

nixos/hosts/cloud-pc/default.nix

@@ -5,16 +5,11 @@
     ../../modules/base.nix
     ../../modules/docker.nix
     ../../modules/libvirtd.nix
+    ../../modules/zerotier.nix
     ./firewall.nix
     ./hardware.nix
   ];
 
-  systemd.services.nix-daemon.environment = {
-    HTTPS_PROXY = "http://192.168.1.10:10172";
-    HTTP_PROXY = "http://192.168.1.10:10172";
-    NO_PROXY = "localhost,127.0.0.0/8,::1,192.168.1.0/24";
-  };
-
   networking = {
     hostName = "cloud-pc";
     useDHCP = false;
@@ -50,18 +45,6 @@
     options = [ "nofail" ];
   };
 
-  systemd.network.wait-online.anyInterface = true;
-
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-
-  services.zerotierone = {
-    enable = true;
-    joinNetworks = [
-      "743993800fa5a34c"
-    ];
-  };
-
   systemd.tmpfiles.rules = [
     "d /opt/data/postgres 0755 ada users - -"
     "d /opt/data/nextcloud 0755 ada users - -"

nixos/hosts/mini-pc/default.nix

@@ -5,16 +5,11 @@
     ../../modules/base.nix
     ../../modules/docker.nix
     ../../modules/libvirtd.nix
+    ../../modules/zerotier.nix
     ./firewall.nix
     ./hardware.nix
   ];
 
-  systemd.services.nix-daemon.environment = {
-    HTTPS_PROXY = "http://192.168.1.10:10172";
-    HTTP_PROXY = "http://192.168.1.10:10172";
-    NO_PROXY = "localhost,127.0.0.0/8,::1,192.168.1.0/24";
-  };
-
   networking = {
     hostName = "mini-pc";
     useDHCP = false;
@@ -22,7 +17,6 @@
 
   systemd.network = {
     enable = true;
-    wait-online.anyInterface = true;
     networks."10-lan" = {
       matchConfig.Name = "en*";
       networkConfig = {
@@ -41,16 +35,6 @@
     fallbackDns = [ "1.1.1.1" "8.8.8.8" ];
   };
 
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-
-  services.zerotierone = {
-    enable = true;
-    joinNetworks = [
-      "743993800fa5a34c"
-    ];
-  };
-
   systemd.tmpfiles.rules = [
     "d /opt/data/adguard 0755 ada users - -"
     "d /opt/data/adguard/work 0755 ada users - -"

nixos/hosts/mini-pc/firewall.nix

@@ -2,22 +2,19 @@
   networking.firewall = {
     enable = true;
     allowedTCPPorts = [
-      22
+      22 # SSH
       53 # DNS (AdGuard)
       80 # HTTP
       443 # HTTPS
       784 # DNS-over-QUIC
       853 # DNS-over-TLS
       3001 # Uptime Kuma
-      3015 
-      10171 # v2raya SOCKS5 LAN
-      10172 # v2raya HTTP proxy LAN
-      20171 # v2raya SOCKS5 (localhost)
-      20172 # v2raya HTTP proxy (localhost)
-      20170 # v2raya mixed
+      3015
       4438
       5443
       8088
+      10171 # v2raya SOCKS5 LAN
+      10172 # v2raya HTTP proxy LAN
       10380
     ];
     allowedUDPPorts = [

nixos/modules/base.nix

@@ -13,7 +13,19 @@
     };
   };
 
-  boot.tmp.cleanOnBoot = true;
+  boot = {
+    tmp.cleanOnBoot = true;
+    loader.systemd-boot.enable = true;
+    loader.efi.canTouchEfiVariables = true;
+  };
+
+  systemd.network.wait-online.anyInterface = true;
+
+  systemd.services.nix-daemon.environment = {
+    HTTPS_PROXY = "http://192.168.1.10:10172";
+    HTTP_PROXY  = "http://192.168.1.10:10172";
+    NO_PROXY    = "localhost,127.0.0.0/8,::1,192.168.1.0/24";
+  };
 
   time.timeZone = "Europe/Moscow";
 

nixos/modules/zerotier.nix

@@ -0,0 +1,6 @@
+{
+  services.zerotierone = {
+    enable = true;
+    joinNetworks = [ "743993800fa5a34c" ];
+  };
+}