Do you have a CI/CD pipeline targeting all the systems with a base config and target-specific  host configs? That sounds like the dream. 

I wish there was more thoughtful integration of git into the nixos-rebuild workflow; like, to achieve commits in lockstep with NixOS generations and some sort of association between the commit and the generation hashes? I guess people might do this with hooks?