config cleanups

systems/aarch64-linux/macbook-pro-nixos/default.nix

@@ -78,13 +78,16 @@
     };
     network = {
       hostName = "macbook-pro-nixos";
-      iwd.enable = true;
-      networkmanager.enable = true;
-      extraFirewallCommands = ''
-        iptables -I INPUT -m pkttype --pkt-type multicast -j ACCEPT
-        iptables -A INPUT -m pkttype --pkt-type multicast -j ACCEPT
-        iptables -I INPUT -p udp -m udp --match multiport --dports 1990,2021 -j ACCEPT
-      '';
+      ipv4 = {
+        method = "auto";
+        interface = "wlan0";
+      };
+      firewall = {
+        allowedUDPPorts = [
+          1990
+          2021
+        ];
+      };
     };
     services = {
       nebula = {
@@ -113,6 +116,8 @@
     # - CONFIG_ANDROID_BINDERFS is not enabled
   };
 
+  systemd.services.virt-secret-init-encryption.enable = false;
+
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages =