Yeah, NixOS + NixOps declaratively define logical and physical part of an machine network.