i should definitely refactor my nixos config again, split out the big machine configs into parts for each separate service