I can't recommend nixops anymore. It is basically unmaintained. But I switched over to https://colmena.cli.rs/ and it is basically a drop-in replacement if you are just managing machines over SSH. (It lacks some of the tools to provision resources like VMs and DNS records)