programs: document nixosBuiltins programs

hosts/common/programs/assorted.nix

@@ -9,6 +9,25 @@ in
 {
   sane.programs = {
     # PACKAGE SETS
+
+    # packages which are unavoidably enabled system-wide by default nixos deployment
+    # the only real reason to make a proper package set out of these is for documentation
+    # and to allow them to be easily replaced by sandboxed versions.
+    nixosBuiltins = {
+      enableFor.system = lib.mkDefault true;
+      packageUnwrapped = null;
+      suggestedPrograms = [
+        # from nixos/modules/tasks/network-interfaces.nix
+        "host"
+        "iproute2"
+        "iputils"
+        "nettools"
+        # if config.networking.wireless.enable:
+        "wirelesstools"
+        "iw"
+      ];
+    };
+
     "sane-scripts.backup" = declPackageSet [
       "sane-scripts.backup-ls"
       "sane-scripts.backup-restore"