refactor(ssh): centralize fleet access

hosts/neogaia/default.nix

@@ -1,5 +1,4 @@
 {
-  config,
   inputs,
   pkgs,
   ...
@@ -39,22 +38,8 @@
   modules.ssh.hostKeys.sopsFile = ../../secrets/neogaia.yaml;
   modules.ssh.userKey.sopsFile = ../../secrets/neogaia.yaml;
 
-  # A machine the operator works from, so it admits the workstation keys alone.
-  modules.ssh.authorizedKeys = config.modules.ssh.workstationKeys;
-
   modules.toolkit.enable = true;
 
-  home-manager.users.${config.user.name}.programs.ssh.settings = {
-    neogaia = {
-      HostName = "10.23.50.146";
-      User = config.user.name;
-    };
-    pikachu = {
-      HostName = "10.23.10.102";
-      User = config.user.name;
-    };
-  };
-
   # The walking-skeleton guest, enabled like any module: proves the guest path
   # end to end through this host's `nix flake check`.
   # Modest caps keep the skeleton guest from starving the laptop.

hosts/pikachu/default.nix

@@ -1,8 +1,4 @@
-{
-  config,
-  pkgs,
-  ...
-}:
+{ pkgs, ... }:
 # pikachu — AZW ME Pro server.
 # Disk layout is in ./disk.nix.
 # `fileSystems` for the root disk are derived from it.
@@ -43,20 +39,10 @@
   modules.ssh.enable = true;
   modules.ssh.hostKeys.sopsFile = ../../secrets/pikachu.yaml;
   modules.ssh.userKey.sopsFile = ../../secrets/pikachu.yaml;
-  modules.ssh.authorizedKeys =
-    config.modules.ssh.workstationKeys
-    ++ config.modules.ssh.serverKeys;
 
   modules.git.enable = true;
   modules.toolkit.enable = true;
 
-  home-manager.users.${config.user.name}.programs.ssh.settings.git-alexion-dev = {
-    header = "Host git.alexion.dev";
-    HostName = "git.alexion.dev";
-    Port = 2022;
-    User = "gitea";
-  };
-
   environment.systemPackages = with pkgs; [
     pciutils
     smartmontools