nix build -o tier0/config.tf.json
nix develop
cd tier0
tofu init
tofu apply
cd ..
cd tier1
# etc ..
exit # nix develop shell


----


Restructure
3 tiers (0, 1, 2)

tier0 creates and deploys incus VM(s)
tier1 configures incus and deploys services (e.g. forgejo) on it
tier2 configures services (e.g. forgejo)

there are probably ways to combine all these using terraform/terranix,
but waiting for VMs etc to become available sounds messy. So for the
moment this structuring should make doing things 'by hand' sane.