@m this is your calling to use epic chungus nixos ...
(no but seriously, this is basically my setup with TPM unlock and secure boot too, and kind of immutability?)
autumnsauce 
@autumn@cafe.autumn.town
@autumn@cafe.autumn.town