nixos-servers/machines/default.nix

{
  jefke = {
    name = "jefke";
    hostname = "jefke.hyp";

    specificConfig = {
      custom = {
        dataDisk.enable = true;

        ssh = {
          hostCert = builtins.readFile ./jefke_host_ed25519-cert.pub;
          userCert = builtins.readFile ./jefke_user_ed25519-cert.pub;
        };
      };
    };
  };
}