if you're using nixos, just to do provisioning, I would argue OStree is a better fit.