network.nix

{
  defaults = {
    networking.firewall.enable = false;
    services.openssh.enable = true;

    imports = [ ./roles.nix ];
  };
} // (import ./terraform.nix)

roles.nix

{ config, lib, pkgs, ... }:
let
  inherit (lib) mkIf mkOption types;
  cfg = config.roles.webnode;
in {
  options = {
    roles.webnode = {
      enable = mkOption {
        type = types.bool;
        default = false;
      };
    };
  };

  config = mkIf cfg.enable rec {
    services.nginx.enable = true;
  };
}

terraform.nix

           {
             webnode =
               { imports = [ ./webnode-hardware-configuration.nix ];
                 roles.webnode.enable = true;
                 deployment.targetHost = "195.201.27.88";
               };
           }

webnode-hardware-configuration.nix

{ config, lib, pkgs, ... }:

{
  imports =
    [ <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
    ];

  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sd_mod" "sr_mod" ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];

  fileSystems."/" =
    { device = "/dev/disk/by-uuid/bd283d50-653e-43e6-a1d6-fd74b7a47fdb";
      fsType = "ext4";
    };

  swapDevices = [ ];

  nix.maxJobs = lib.mkDefault 1;
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/sda";
}