In reply to @hexa:lossy.network
anyway, I think this is the difference between eval as root vs my user

error:
       … while evaluating attribute 'sso2.darmstadt.ccc.de'

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/attrsets.nix:560:14:

          559|     value:
          560|     { inherit name value; };
             |              ^
          561|

       … while calling anonymous lambda

         at /run/user/1000/colmena-assets-le334v/eval.nix:188:39:

          187|   toplevel =         lib.mapAttrs (_: v: v.config.system.build.toplevel) nodes;
          188|   deploymentConfig = lib.mapAttrs (_: v: v.config.deployment)            nodes;
             |                                       ^
          189|   deploymentConfigSelected = names: lib.filterAttrs (name: _: elem name names) deploymentConfig;

       … while calling 'g'

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/attrsets.nix:701:19:

          700|           g =
          701|             name: value:
             |                   ^
          702|             if isAttrs value && cond value

       … from call site

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/attrsets.nix:704:20:

          703|               then recurse (path ++ [name]) value
          704|               else f (path ++ [name]) value;
             |                    ^
          705|         in mapAttrs g;

       … while calling anonymous lambda

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/modules.nix:242:72:

          241|           # For definitions that have an associated option
          242|           declaredConfig = mapAttrsRecursiveCond (v: ! isOption v) (_: v: v.value) options;
             |                                                                        ^
          243|

       … while evaluating the option `_module.freeformType':

       … while calling anonymous lambda

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/modules.nix:538:19:

          537|     mergeModules' prefix modules
          538|       (concatMap (m: map (config: { file = m._file; inherit config; }) (pushDownProperties m.config)) modules);
             |                   ^
          539|

       … from call site

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/modules.nix:538:73:

          537|     mergeModules' prefix modules
          538|       (concatMap (m: map (config: { file = m._file; inherit config; }) (pushDownProperties m.config)) modules);
             |                                                                         ^
          539|

       … while calling 'pushDownProperties'

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/modules.nix:874:24:

          873|   */
          874|   pushDownProperties = cfg:
             |                        ^
          875|     if cfg._type or "" == "merge" then

       … from call site

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/nixos/lib/eval-config.nix:50:8:

           49|     config = lib.mkMerge (
           50|       (optional (system != null) {
             |        ^
           51|         # Explicit `nixpkgs.system` or `nixpkgs.localSystem` should override

       … while calling 'optional'

         at /nix/store/k766s621xxdvsfxy46rjxfnb4bqb9glj-nixos-23.11-src/lib/lists.nix:359:20:

          358|   */
          359|   optional = cond: elem: if cond then [elem] else [];
             |                    ^
          360|

       error: attribute 'system' missing

       at /run/user/1000/colmena-assets-le334v/eval.nix:143:18:

          142|     };
          143|   in evalConfig {
             |                  ^
          144|     inherit (npkgs) system;
       Did you mean one of mystem, systemc, systemd, syntex or systemfd?