our containers profile already sets networking.firewall = false, so this does exactly nothing except cause confusion.
we decided to: - get rid of unused packages - simpify the directory layout since we only have one host anyways - move our docs (such as they are) in-tree
