refactor(nixos): centralize physical host defaults

configs/nixos/hosts/neogaia/default.nix

@@ -13,19 +13,8 @@
     ./disk.nix
   ];
 
-  # systemd-boot on the EFI system partition.
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
-
   boot.kernelPackages = pkgs.linuxPackages_cachyos;
 
-  # Redistributable firmware for the QCA6174 wifi (ath10k blobs).
-  # Intel microcode updates follow from this, so none is declared here.
-  hardware.enableRedistributableFirmware = true;
-
-  # RAM-backed swap, no on-disk swap partition.
-  zramSwap.enable = true;
-
   # So wifi can be joined from the console.
   networking.networkmanager.enable = true;
 
@@ -48,13 +37,6 @@
     vpn-off = ''sudo systemctl stop 'wireguard-wg-home*.service' wireguard-wg-home.target'';
   };
 
-  # So setup can be driven over the network.
-  # The matching host public keys sit beside this file in plaintext, since
-  # publishing them is their purpose.
-  modules.network.ssh.enable = true;
-  modules.network.ssh.hostKeys.sopsFile = ../../secrets/neogaia.yaml;
-  modules.network.ssh.userKey.sopsFile = ../../secrets/neogaia.yaml;
-
   modules.monorepo.enable = true;
   modules.shell.herdr.enable = true;
   modules.shell.gitea-axi.enable = true;