x-ec2.nix

let
  region = "eu-west-1";
  accessKeyId = "dev";
  webserver =
  { config, pkgs, resources, ... }:
  { deployment.targetEnv = "ec2";
    deployment.ec2.accessKeyId = "dev";
    deployment.ec2.region = region;
    deployment.ec2.instanceType = "t3.small";
    deployment.ec2.keyPair = resources.ec2KeyPairs.my-key-pair;
  };
in
{
  webserver = webserver;
  resources.ec2KeyPairs.my-key-pair =
  { inherit region accessKeyId; };
}

x.nix

{
  network.description = "Web server";
  webserver =
  { config, pkgs, ... }:
  { services.httpd.enabled = true;
    services.httpd.adminAddr = "alice@example.com";
    services.httpd.documentRoot = "${pkgs.valgrind.doc}/share/doc/valgrind/html";
    networking.firewall.allowedTCPPorts = [ 80 ];
  };
}