NixOS Diagram
Hard user separation with NixOS - Tweag