disallow unfree by default

hosts/default.nix

@@ -23,17 +23,6 @@ in {
     meta = {
       nixpkgs = import inputs.nixpkgs {
         system = "x86_64-linux";
-        config.allowUnfree = true;
-      };
-
-      nodeNixpkgs = {
-        nixdesk = import inputs.nixpkgs {
-          system = "x86_64-linux";
-          config = {
-            allowUnfree = true;
-            rocmSupport = true;
-          };
-        };
       };
 
       inherit specialArgs;
@@ -115,7 +104,7 @@ in {
 
           services.syncthing
           services.virt.waydroid
-          #services.virt.virt-manager
+          services.virt.virt-manager
           #network.wifi
           #services.ollama
           desktop.x11.nosleep

hosts/nixdesk/default.nix

@@ -19,6 +19,16 @@
   #  "resume_offset=3841492992" # fdisk -l
   #];
 
+  nixpkgs.config = {
+    rocmSupport = true;
+    allowUnfreePredicate = pkg:
+      builtins.elem (lib.getName pkg) [
+        "steam"
+        "steam-original"
+        "apple_cursor" # bwuh this is NOT unfree!!
+      ];
+  };
+
   networking.interfaces.eno1.wakeOnLan.enable = true;
 
   system.stateVersion = "23.11";

hosts/nixdesk/hardware.nix

@@ -79,7 +79,7 @@
     device = "/.swapvol/swapfile";
   };
 
-  hardware.enableAllFirmware = true;
+  hardware.enableRedistributableFirmware = true;
 
   services.xserver.videoDrivers = [
     "amdgpu"