I haven't messed with nix, but I've used guix, which I think nix is a similar concept to. It's basically ansible on steroids, with every aspect of the system defined declaratively. Guix at least isn't quite "there yet", but it probably will be before too long...