[Nullabillity]

I basically do that for my Xen VMs with NixOps in the "no provisioner" mode. Would be exactly the same for bare metal, plus I get dev VMs that match the prod environment for free.