In a standard image you need to activate ssh and add key for root. That is the minimum for nixops to work, since it needs to root access via ssh.
users.users.root.openssh.authorizedKeys.keys = [ <yourkey> ];
services.openssh.enable = true;
3 Likes