refactor: Move network configurations to machine directories

- Move network-congenital-optimist.nix to machines/congenital-optimist/
- Move network-sleeper-service.nix to machines/sleeper-service/
- Update import paths in machine configurations
- Clean up modules/network/common.nix to remove SSH duplication
- Consolidate SSH configuration in modules/security/ssh-keys.nix
- Remove machine-specific networking from shared common module

This improves dependency tracking by co-locating machine-specific
network configurations with their respective machines.
This commit is contained in:
Geir Okkenhaug Jerstad 2025-06-06 18:08:45 +02:00
parent fff47629f2
commit e976b14d19
6 changed files with 12 additions and 17 deletions

View file

@ -1,5 +1,5 @@
# Common Network Configuration
# Shared networking settings across all machines
# Minimal shared networking settings across all machines
{ config, pkgs, ... }:
{
@ -8,11 +8,10 @@
# Enable nftables by default for all machines
nftables.enable = true;
# Common firewall settings
# Basic firewall settings (SSH handled by security/ssh-keys.nix)
firewall = {
enable = true;
# SSH is allowed by default on all machines
allowedTCPPorts = [ 22 ];
# SSH port is configured in modules/security/ssh-keys.nix
};
};
@ -21,13 +20,6 @@
# Tailscale VPN for secure remote access
tailscale.enable = true;
# SSH access with secure defaults
openssh = {
enable = true;
settings = {
PermitRootLogin = "no";
PasswordAuthentication = false;
};
};
# Note: SSH configuration is handled by modules/security/ssh-keys.nix
};
}