deployment.nix

{
  hostname = { resources, ... }:
  {
    deployment = {
      targetEnv = "ec2";
      ec2 = {
        instanceType = "t2.small";
        accessKeyId = "awskeyname";
        region = "us-east-1";
        keyPair = resources.ec2KeyPairs.keypair;
        securityGroups = [ resources.ec2SecurityGroups.allowSsh ];
      };
    };
  };
  resources = {
    ec2SecurityGroups.allowSsh = {
      accessKeyId = "awskeyname";
      region = "us-east-1";
      rules = [
        { protocol = "tcp"; fromPort = 22; toPort = 22; sourceIp = "0.0.0.0/0"; }
      ];
    };
    ec2KeyPairs.keypair = {
      accessKeyId = "awskeyname";
      region = "us-east-1";
    };
  };
}