I have an endless list of configuration changes to make, but security hardening with nix-mineral and impermanence, and using den to organize if you have a lot of hosts/users are options I recommend. Also if you have a spare laptop lying around, I use that for hacky NixOS experimentation. I also want to switch my homelab to NixOS + MicroVM.nix + OpenTofu, and possibly Kubernetes.