Hard-code in a path to root's SSH private key so provisioning with secrets on initial install is possible.

hosts/flynode/default.nix

@@ -57,6 +57,8 @@
     group = "users";
   };
 
+  age.identityPaths = [ "/root/.ssh/id_rsa" ];
+
   # This option defines the first version of NixOS you have installed on this particular machine,
   # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
   #

hosts/flynode/hardware-configuration.nix

@@ -18,8 +18,8 @@
       fsType = "zfs";
     };
 
-  fileSystems."/nix" =
-    { device = "zpool/nix";
+  fileSystems."/home" =
+    { device = "zpool/home";
       fsType = "zfs";
     };
 
@@ -28,13 +28,13 @@
       fsType = "zfs";
     };
 
-  fileSystems."/home" =
-    { device = "zpool/home";
+  fileSystems."/nix" =
+    { device = "zpool/nix";
       fsType = "zfs";
     };
 
   fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/0642-E087";
+    { device = "/dev/disk/by-uuid/001D-B2B7";
       fsType = "vfat";
       options = [ "fmask=0022" "dmask=0022" ];
     };