disallow unfree by default

profiles/nix/default.nix

@@ -10,7 +10,6 @@
   ...
 }: {
   imports = [
-    super.nixpkgs
     super.substituters
   ];
 

profiles/nix/nixpkgs.nix

@@ -1,10 +0,0 @@
-{
-  self,
-  super,
-  root,
-}: {
-  nixpkgs = {
-    config.allowUnfree = true;
-    config.permittedInsecurePackages = [];
-  };
-}

profiles/programs/tools.nix

@@ -17,11 +17,7 @@
     lm_sensors
     fd # find replacement
     graphviz-nox
-    (
-      if config.nixpkgs.config.allowUnfree
-      then p7zip-rar
-      else p7zip
-    )
+    p7zip
     unar
     openssl # for generating passwords
   ];

profiles/services/virt/virt-manager.nix

@@ -1,4 +1,4 @@
-{pkgs, ...}: {
+_: {pkgs, ...}: {
   virtualisation.libvirtd.enable = true;
   programs.virt-manager.enable = true;
   boot.kernelParams = ["amd_iommu=on" "iommu=pt"];