Better practices for safely and reliably deploying and updating NixOS systems.