up

hosts/darwin/shared.nix

@@ -1,6 +1,6 @@
 {
   imports = [
-    ../../profiles/base
+    ../../modules/base
-    ../../profiles/darwin
+    ../../modules/darwin
   ];
 }

hosts/nixos/tahani/default.nix

@@ -5,8 +5,8 @@
   ...
 }: {
   imports = [
-    ../../../profiles/base
+    ../../../modules/base
-    ../../../profiles/nixos
+    ../../../modules/nixos
   ];
 
   boot = {
@@ -41,10 +41,12 @@
   networking = {
     hostName = hostname;
     useDHCP = false;
-    interfaces.eno1.ipv4.addresses = [{
+    interfaces.eno1.ipv4.addresses = [
+      {
         address = "192.168.1.10";
         prefixLength = 24;
-    }];
+      }
+    ];
     defaultGateway = "192.168.1.1";
     nameservers = ["1.1.1.1"];
   };

modules/base/home-manager/neovim/default.nix

@@ -22,6 +22,5 @@
         flavour = "latte";
       };
     };
-
   };
 }

modules/nixos/default.nix

@@ -27,10 +27,6 @@ in {
   networking.firewall = {
     enable = true;
     trustedInterfaces = ["eno1" "tailscale0"];
-    allowPing = true;
-    allowedUDPPorts = [53 10000 config.services.tailscale.port];
-    allowedTCPPorts = [22 53];
-    checkReversePath = "loose";
   };
 
   services = {
@@ -44,6 +40,8 @@ in {
     tailscale = {
       enable = true;
       port = 41641;
+      useRoutingFeatures = "server";
+      openFirewall = true;
     };
     adguardhome = {
       enable = true;