explicitly enable firewall and network manager in default host configs

hosts/servers/default.nix

@@ -28,19 +28,6 @@
     };
   };
 
-  system.autoUpgrade = {
-    enable = true;
-    flake = inputs.self.outPath;
-    flags = [
-      "--update-input"
-      "nixpkgs"
-      "-L"
-    ];
-    dates = "Sat *-*-* 06:00:00";
-    randomizedDelaySec = "45min";
-    allowReboot = true;
-  };
-
   security = {
     sudo.enable = lib.mkDefault false;
     doas = {
@@ -55,8 +42,26 @@
     polkit.enable = true;
   };
 
+  networking = {
+    firewall.enable = true;
+    networkmanager.enable = true;
+  };
+
   time.timeZone = "America/Detroit";
 
+  system.autoUpgrade = {
+    enable = true;
+    flake = inputs.self.outPath;
+    flags = [
+      "--update-input"
+      "nixpkgs"
+      "-L"
+    ];
+    dates = "Sat *-*-* 06:00:00";
+    randomizedDelaySec = "45min";
+    allowReboot = true;
+  };
+
   programs = {
     git.enable = true;
     htop.enable = true;

hosts/servers/eden/default.nix

@@ -15,7 +15,6 @@
   networking = {
     hostId = "bd03847d"; # Required for ZFS support.
     hostName = "eden";
-    networkmanager.enable = true;
   };
 
   motd = {

hosts/servers/hive/default.nix

@@ -9,10 +9,7 @@
     efi.canTouchEfiVariables = true;
   };
 
-  networking = {
-    hostName = "hive";
-    networkmanager.enable = true;
-  };
+  networking.hostName = "hive";
 
   motd = {
     networkInterfaces = lib.lists.singleton "eno1";

hosts/servers/oasis/default.nix

@@ -15,7 +15,6 @@
   networking = {
     hostId = "7a7d723a"; # Required for ZFS support.
     hostName = "oasis";
-    networkmanager.enable = true;
   };
 
   motd = {

hosts/servers/raindog/default.nix

@@ -9,10 +9,7 @@
     efi.canTouchEfiVariables = true;
   };
 
-  networking = {
-    hostName = "raindog";
-    networkmanager.enable = true;
-  };
+  networking.hostName = "raindog";
 
   motd = {
     networkInterfaces = lib.lists.singleton "eno1";

hosts/workstations/default.nix

@@ -42,6 +42,11 @@
     polkit.enable = true;
   };
 
+  networking = {
+    firewall.enable = true;
+    networkmanager.enable = true;
+  };
+
   time.timeZone = "America/Detroit";
 
   hardware.graphics.enable32Bit = true;

hosts/workstations/sparrow/default.nix

@@ -9,10 +9,7 @@
     efi.canTouchEfiVariables = true;
   };
 
-  networking = {
-    hostName = "sparrow";
-    networkmanager.enable = true;
-  };
+  networking.hostName = "sparrow";
 
   services = {
     xserver.xkb.options = "ctrl:swapcaps";

hosts/workstations/woodpecker/default.nix

@@ -9,10 +9,7 @@
     efi.canTouchEfiVariables = true;
   };
 
-  networking = {
-    hostName = "woodpecker";
-    networkmanager.enable = true;
-  };
+  networking.hostName = "woodpecker";
 
   environment.systemPackages = with pkgs; [
     mesa