rewrite

modules/common.nix

@@ -0,0 +1,11 @@
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [
+    ./common/users.nix
+    ./common/packages.nix
+    ./common/services.nix
+    ./common/networking.nix
+    ./common/system.nix
+  ];
+}

modules/common/networking.nix

@@ -0,0 +1,15 @@
+{ config, lib, pkgs, ... }:
+
+{
+  time.timeZone = "Europe/London";
+  i18n.defaultLocale = "en_US.UTF-8";
+  console.keyMap = "uk";
+
+  networking = {
+    firewall.enable = true;
+    firewall.allowedTCPPorts = [ 22 ]; # SSH
+    hostName = config.networking.hostName or "nixos";
+    useDHCP = false;
+    usePredictableInterfaceNames = false;
+  };
+}

modules/common/packages.nix

@@ -0,0 +1,18 @@
+{ config, lib, pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    nano
+    vim
+    git
+    curl
+    wget
+    sops
+    age
+    inetutils
+    mtr
+    sysstat
+    dig
+    openssl
+  ];
+}

modules/common/services.nix

@@ -0,0 +1,6 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.openssh.enable = true;
+  services.openssh.permitRootLogin = "no";
+}

modules/common/system.nix

@@ -0,0 +1,10 @@
+{ config, lib, pkgs, ... }:
+
+{
+  system.stateVersion = "25.11";
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+
+  services.xserver.xkb.layout = "uk";
+}

modules/common/users.nix

@@ -0,0 +1,35 @@
+{ config, lib, pkgs, ... }:
+
+{
+  users.mutableUsers = false;
+
+  users.users.phoenix = {
+    isNormalUser = true;
+    description = "Phoenix";
+    extraGroups = [ "wheel" "networkmanager" ];
+    shell = pkgs.bash;
+    home = "/home/phoenix";
+    createHome = true;
+    useDefaultShell = true;
+  };
+
+  users.users.deploy = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ];
+    home = "/home/deploy";
+  };
+
+  security.sudo.extraRules = [
+    {
+      users = [ "phoenix" ];
+      commands = [
+        {
+          command = "ALL";
+          options = [ "NOPASSWD" ];
+        }
+      ];
+    }
+  ];
+
+  nix.settings.trusted-users = [ "root" "@wheel" ];
+}