machine configs

These are managed with Nix flakes.

This isn't super-modular like some folks' -- that could be better.