%update 2022-07-19 16:40
deploy-rs has a few requirements and a few make it easier configuration tricks if you're porting an pre-flakes machine to deploy-rs
nix.trustedUsers = [ "root" "@wheel" ]; security.sudo.wheelNeedsPassword = false;
Though the first line isn't strictly necessary, sometimes you'll get user not trusted when deploying remote services. The second one is strictly necessary.