nixos-servers/machines/default.nix

{
  jefke = {
    name = "jefke";
    hostname = "jefke.hyp";

    specificConfig = {
      custom = {
        dataDisk.enable = true;

        ssh = {
          hostCert = builtins.readFile ./jefke_host_ed25519-cert.pub;
          userCert = builtins.readFile ./jefke_user_ed25519-cert.pub;
        };

        terraformDatabase.enable = true;

        k3s.enable = true;
      };
    };
  };
}