gitignore result/ folder

This folder is usually added by `nix build` commands and is also
always a symlink into the nix store.
There is no point in ever adding it to git so to prevent mistakes,
we ignore it.

.gitignore

@@ -1 +1,2 @@
 .direnv
+result

README.md

@@ -78,5 +78,14 @@ See [sops-nix](https://github.com/Mic92/sops-nix)
 
 ## VM Configuration
 
-**TODO**
+Any NixOS VM can be reconfigured remotely by calling:
 
+```bash
+./switch_remote.sh <action> <machine>`
+```
+
+- `<action>` can be any of the [standard nixos-rebuild actions](https://wiki.nixos.org/wiki/Nixos-rebuild), e.g. `boot`, `switch`, etc.
+- `<macine>` should be the FQDN of the machine config to apply.
+
+  The script uses this argument to know how to reach the machine in addition to choosing a nixos configuration from this flake as system source (see [systems/](./systems/)).
+  This also means that you should have a config entry in you SSH config resolving the system name to an IP address (during the event, we will probably have an internal DNS server which also resolves the hostname).

switch_remote.sh

@@ -0,0 +1,14 @@
+#/usr/bin/env bash
+# a small script for calling nixos-rebuild switch on a remote host but with less repitition
+set -euo pipefail
+
+ACTION=$1
+HOST=$2
+
+exec nixos-rebuild $ACTION \
+  --use-substitutes \
+  --no-build-nix \
+  --use-remote-sudo \
+  --build-host "$HOST" \
+  --target-host "$HOST" \
+  --flake ".#$HOST" \