bento

Each client accesses only its own configuration files via SSH-authenticated SFTP chroots, ensuring data isolation and security, as highlighted in the privacy-first model.

Administrators can verify remote systems run identical NixOS builds to local configurations, leveraging Nix's reproducibility for peace of mind.

Configurations built centrally can serve as binary substituters for clients, reducing rebuild times and network usage, as noted in the efficient feature.

All host configurations are stored in a single repository, simplifying updates and version control for organized administration.

Components like configuration fetching can be swapped, such as using GitHub instead of SFTP, providing flexibility for diverse deployment needs.