remove lots of dead code and refactor

hosts/common.nix

@@ -39,30 +39,46 @@
     registry.nixpkgs.flake = inputs.nixpkgs;
   };
 
+  i18n.defaultLocale = "en_US.UTF-8";
   time.timeZone = "America/New_York";
   networking = {
     firewall.logRefusedConnections = false;
     nameservers = [
-      # quad9
-      "2620:fe::fe"
-      "2620:fe::9"
-      "9.9.9.9"
-      "149.112.112.112"
+      # quad9 (unfiltered)
+      "2620:fe::10"
+      "2620:fe::fe:10"
+      "9.9.9.10"
+      "149.112.112.110"
     ];
     timeServers = [
+      # https://github.com/jauderho/nts-servers
+      "ntp3.fau.de"
       "ntppool1.time.nl"
-      "nts.netnod.se"
-      "ptbtime1.ptb.de"
-      "ohio.time.system76.com"
-      "time.txryan.com"
-      "time.dfm.dk"
+      "time.signorini.ch"
+      "stratum1.time.cifelli.xyz"
+      "nts.teambelgium.net"
+      "c.st1.ntp.br"
     ];
   };
   services.chrony = {
     enable = true;
     enableNTS = true;
+    enableMemoryLocking = true;
+    extraConfig = ''
+      # Expedited Forwarding
+      dscp 46
+      # disable command port
+      cmdport 0
+      # only allow NTS
+      authselectmode require
+      # update the clock only when at least 3 sources agree on the correct time
+      minsources 3
+    '';
   };
 
   # see journald.conf(5)
   services.journald.extraConfig = "MaxRetentionSec=2d";
+
+  services.thermald.enable = true;
+  environment.enableAllTerminfo = true;
 }