From 72f73e9900c1f818ad5e08a1f25fa983c65e57f4 Mon Sep 17 00:00:00 2001
From: Chris Montgomery <chris@cdom.io>
Date: Thu, 30 May 2024 22:59:03 -0400
Subject: [PATCH] fix: allow some necessary unfree packages

---
 machines/tuvok/default.nix                                  | 1 +
 nixos/profiles/hardware/keyboard/default.nix                | 1 +
 nixos/profiles/hardware/printers-scanners/epson-wf-3520.nix | 4 +++-
 nixos/profiles/one-password.nix                             | 5 +++++
 4 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/machines/tuvok/default.nix b/machines/tuvok/default.nix
index 07e94df9a..08acf0658 100644
--- a/machines/tuvok/default.nix
+++ b/machines/tuvok/default.nix
@@ -18,6 +18,7 @@
   # support DP-Alt display output.  DP-Alt output is required for true HDMI or
   # DP output via one of this machine's two USB-C ports and zero HDMI/DP ports.
   services.xserver.videoDrivers = [ "displaylink" ];
+  dotfield.nixpkgs.allowedUnfreePackages = [ "displaylink" ];
 
   system.stateVersion = "23.11"; # Did you read the comment?
 }
diff --git a/nixos/profiles/hardware/keyboard/default.nix b/nixos/profiles/hardware/keyboard/default.nix
index 0795ff94b..4acd89405 100644
--- a/nixos/profiles/hardware/keyboard/default.nix
+++ b/nixos/profiles/hardware/keyboard/default.nix
@@ -9,6 +9,7 @@
 
   hardware.keyboard.keyboardio.enable = true;
 
+  dotfield.nixpkgs.allowedUnfreePackages = [ "keymapp" ];
   hardware.keyboard.zsa.enable = true;
   environment.systemPackages = [
     pkgs.keymapp
diff --git a/nixos/profiles/hardware/printers-scanners/epson-wf-3520.nix b/nixos/profiles/hardware/printers-scanners/epson-wf-3520.nix
index 4d0c7f619..9149675a3 100644
--- a/nixos/profiles/hardware/printers-scanners/epson-wf-3520.nix
+++ b/nixos/profiles/hardware/printers-scanners/epson-wf-3520.nix
@@ -55,13 +55,15 @@
 # - utsushi (usb/scsi only)
 #
 # I have not tested USB scanning but I'm sure it's much more straightforward.
-{ pkgs, ... }:
+{ lib, pkgs, ... }:
 let
   ip = "192.168.1.192";
 in
 {
   imports = [ ./common.nix ];
 
+  nixpkgs.config.allowlistedLicenses = [ lib.licenses.epson ];
+
   hardware.sane.extraBackends = [
     pkgs.epkowa
 
diff --git a/nixos/profiles/one-password.nix b/nixos/profiles/one-password.nix
index edc93a43c..0111abee4 100644
--- a/nixos/profiles/one-password.nix
+++ b/nixos/profiles/one-password.nix
@@ -3,6 +3,11 @@ let
   isGraphical = config.services.xserver.enable;
 in
 {
+  dotfield.nixpkgs.allowedUnfreePackages = [
+    "1password-cli"
+    "1password"
+  ];
+
   home-manager.sharedModules = lib.singleton (
     { pkgs, ... }:
     {