Configuration validation and deployment with Nix