add NixOS services.toph module with sandboxed systemd unit, declared-peers JSON injection, and example host config
$ koh steal kepr.uk/toph@a0dd57cb8d4b
·
parent: e2d012
parent: e2d012