France’s digital agency has been using NixOS on internal workstations for months through Sécurix, its open-source, security-hardened configuration.