refactor and cleanup

modules/work.nix

@@ -1,4 +1,4 @@
-{ den, inputs, lib, config, ... }: {
+{ den, inputs, ... }: {
   den.aspects.work-specific.nixos = { pkgs, config, ... }: {
     imports = [
       ./_hardware/work-hardware.nix
@@ -41,24 +41,6 @@
       __GLX_VENDOR_LIBRARY_NAME = "nvidia";
     };
 
-    security.sudo.wheelNeedsPassword = lib.mkForce true;
-
-    networking.firewall = {
-      enable          = true;
-      allowedTCPPorts = [];
-      allowedUDPPorts = [];
-    };
-
-    powerManagement.enable = true;
-
-    services.tlp = {
-      enable   = true;
-      settings = {
-        CPU_SCALING_GOVERNOR_ON_AC  = "performance";
-        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
-      };
-    };
-
     boot = {
       initrd.kernelModules = [ "amdgpu" ];
       kernelModules        = [ "kvm-amd" "nvidia" "nvidia_modeset" "nvidia_uvm" "nvidia_drm" ];