Agreed, with NixOs - not only can you declare which packages to include, you can declare how those packages are setup.

Like setting up nginx as a package with SSL support for example.com domain, PHP working with nginx via PHP-FPM, etc.

StageX I don’t believe can do that. I believe it can only confirm that the nginx package hasn’t been tampered with.