nonw.nix

let
  p = builtins.fetchTarball "https://github.com/NixOS/nixpkgs/archive/nixos-20.03.tar.gz";
  common = { pkgs, config, ... }: {
    fileSystems."/" = { device = "/dev/null"; fsType = "ext4"; };
    boot.loader.grub.devices = ["/dev/null"];
    environment.systemPackages = [pkgs.ngrok];

    nixpkgs.pkgs = import p { # set pkgs globally, kind of the same way as "network.pkgs" does transiently
      config.allowUnfree = true;
    };
  };
in
{

  host1 = { lib, ... }: {  # this host will refuse to eval, because ngrok
    imports = [ common ];
    nixpkgs.pkgs = lib.mkForce (import p { # overrides "common"
      config.allowUnfree = false;
    });
  };

  host2 = { ... }: {
    imports = [ common ];
  };

  host3 = { ... }: {
    imports = [ common ];
  };

  network = { # set morph dependencies, so that they don't leak in from environment
    lib = import "${p}/lib";
    evalConfig = "${p}/nixos/lib/eval-config.nix";
  };

}