Unclear at what level you're asking, but Mitchell's comment identified it as a nix-darwin feature, and you can see how he's using it in the config he linked at https://github.com/mitchellh/nixos-config/blob/b73a16fc918c5...