Extract Shared NixOS Settings

nixos/hosts/mini-pc/default.nix

@@ -5,16 +5,11 @@
     ../../modules/base.nix
     ../../modules/docker.nix
     ../../modules/libvirtd.nix
+    ../../modules/zerotier.nix
     ./firewall.nix
     ./hardware.nix
   ];
 
-  systemd.services.nix-daemon.environment = {
-    HTTPS_PROXY = "http://192.168.1.10:10172";
-    HTTP_PROXY = "http://192.168.1.10:10172";
-    NO_PROXY = "localhost,127.0.0.0/8,::1,192.168.1.0/24";
-  };
-
   networking = {
     hostName = "mini-pc";
     useDHCP = false;
@@ -22,7 +17,6 @@
 
   systemd.network = {
     enable = true;
-    wait-online.anyInterface = true;
     networks."10-lan" = {
       matchConfig.Name = "en*";
       networkConfig = {
@@ -41,16 +35,6 @@
     fallbackDns = [ "1.1.1.1" "8.8.8.8" ];
   };
 
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-
-  services.zerotierone = {
-    enable = true;
-    joinNetworks = [
-      "743993800fa5a34c"
-    ];
-  };
-
   systemd.tmpfiles.rules = [
     "d /opt/data/adguard 0755 ada users - -"
     "d /opt/data/adguard/work 0755 ada users - -"

nixos/hosts/mini-pc/firewall.nix

@@ -2,22 +2,19 @@
   networking.firewall = {
     enable = true;
     allowedTCPPorts = [
-      22
+      22 # SSH
       53 # DNS (AdGuard)
       80 # HTTP
       443 # HTTPS
       784 # DNS-over-QUIC
       853 # DNS-over-TLS
       3001 # Uptime Kuma
-      3015 
-      10171 # v2raya SOCKS5 LAN
-      10172 # v2raya HTTP proxy LAN
-      20171 # v2raya SOCKS5 (localhost)
-      20172 # v2raya HTTP proxy (localhost)
-      20170 # v2raya mixed
+      3015
       4438
       5443
       8088
+      10171 # v2raya SOCKS5 LAN
+      10172 # v2raya HTTP proxy LAN
       10380
     ];
     allowedUDPPorts = [