flake/hosts/tyo0/anti-feature.nix

{ lib, ... }:
{
  nixpkgs.config = {
    allowNonSource = false;
    allowNonSourcePredicate =
      pkg:
      lib.elem (lib.getName pkg) [
        "adoptopenjdk-hotspot-bin"
        "cargo-bootstrap"
        "rustc-bootstrap"
        "rustc-bootstrap-wrapper"
        "keycloak"
        "temurin-bin"
      ];

    allowUnfree = false;
    allowUnfreePredicate =
      pkg:
      lib.elem (lib.getName pkg)
        [
        ];

    permittedInsecurePackages = [
      "cinny-4.1.0"
      "cinny-unwrapped-4.1.0"
    ];
  };
}