This! pfSense/OPNSense seem to me like perfect candidates for declarative configuration. Even though, technically speaking, they are since everything is being s

This! pfSense/OPNSense seem to me like perfect candidates for declarative configuration. Even though, technically speaking, they are since everything is being save to a config file, which you can backup and restore. It's just less declarative then you'd like it to be. Sounds like they could easily employ Nix for handling that, though.