switch over hopper fully (+ minor refactoring)

nix/systemProfiles/network/avahi.nix

@@ -0,0 +1,13 @@
+{
+  # network discovery, mDNS
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    publish = {
+      enable = true;
+      domain = true;
+      userServices = true;
+    };
+    openFirewall = true;
+  };
+}

nix/systemProfiles/network/goldberg.nix

@@ -0,0 +1,6 @@
+{
+  networking.firewall = {
+    allowedTCPPorts = [47584];
+    allowedUDPPorts = [47584];
+  };
+}

nix/systemProfiles/network/localsend.nix

@@ -0,0 +1,12 @@
+{
+  self,
+  super,
+  root,
+}: {pkgs, ...}: {
+  environment.systemPackages = with pkgs; [
+    localsend
+  ];
+
+  networking.firewall.allowedTCPPorts = [53317];
+  networking.firewall.allowedUDPPorts = [53317];
+}

nix/systemProfiles/network/networkd.nix

@@ -0,0 +1,13 @@
+{
+  networking.useNetworkd = true;
+  systemd.network = {
+    enable = true;
+  };
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = ["~."];
+  };
+
+  # TODO use networkd-dispatcher to do some things when network connectivity changes maybe
+}

nix/systemProfiles/network/tailscale.nix

@@ -0,0 +1,12 @@
+{
+  self,
+  super,
+  root,
+}: {config, ...}: {
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
+    useRoutingFeatures = "client";
+    #authKeyFile = config.sops.secrets.tailscale-auth.path;
+  };
+}

nix/systemProfiles/network/wifi.nix

@@ -0,0 +1,5 @@
+{
+  networking.wireless = {
+    iwd.enable = true;
+  };
+}