test: jellyfin microVM

systems/ceres/config/networking.nix

@@ -9,13 +9,10 @@ let
   wireguardService = instances.wireGuard;
 in
 {
-  # Enable microVM host
   microvm.host.enable = true;
 
-  # systemd-networkd for bridge management (required for TAP interfaces)
   systemd.network.enable = true;
 
-  # Bridge configuration for microVMs
   systemd.network.netdevs."10-br-vms" = {
     netdevConfig = {
       Name = "br-vms";
@@ -23,7 +20,6 @@ in
     };
   };
 
-  # Attach physical interface and tap interfaces to bridge
   systemd.network.networks."20-lan" = {
     matchConfig.Name = [
       "enp10s0"
@@ -34,7 +30,6 @@ in
     };
   };
 
-  # Bridge gets the host IP
   systemd.network.networks."30-br-vms" = {
     matchConfig.Name = "br-vms";
     networkConfig = {
@@ -47,12 +42,9 @@ in
 
   networking = {
     hostName = ceres.name;
-    # NetworkManager disabled - using declarative networking
     networkmanager.enable = false;
     nftables.enable = true;
     useDHCP = false;
-    # Network configuration handled by systemd-networkd bridge
-
     firewall = {
       enable = true;
       allowedTCPPorts = [