roles/workstation.nix