I've never boosted before! But you asked for Nix configs, so I had to share mine:

https://github.com/suderman/nixos

It's an impermanence setup for all my machines, complete with home-manager, disko & Hyprland. Secrets are encrypted via agenix, using a key derived from my cold wallet's seed words and BIP-85. My SSH keys & age identities are deterministically derived from this key, meaning I can bootstrap a host scanning a QR code on my COLDCARD Q. And if this key gets compromised, I can rekey everything by picking a different derivation index number.

PS - I blame you for my NixOS, Hyprland and Bitcoin journey. Thank you so much. :-)

https://fountain.fm/episode/9gbeU3iOXO0ydFdKsq6R

nostr:nevent1qvzqqqpxquqzqrgpakxv6etkmppma585jehv465p558vk3p5uvmv5484txvq3yft6vkc92