refactor: complete overhaul

systems/desktop/config/networking.nix

@@ -0,0 +1,35 @@
+{
+  lib,
+  flake,
+  ...
+}: let
+  inherit (flake.config.machines.devices) desktop;
+in {
+  networking = {
+    hostName = desktop.name;
+    networkmanager.enable = true;
+    nftables.enable = true;
+    useDHCP = lib.mkDefault true;
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [
+        22 # SSH
+        4333 # Feishin
+        2234 # Soulseek
+        3131 # Deskreen
+      ];
+    };
+  };
+  services = {
+    avahi = {
+      enable = true;
+      openFirewall = true;
+      nssmdns4 = true;
+    };
+    sshd.enable = true;
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+    };
+  };
+}