From 6fe9cf2adccddef6a4f243d8efee44aed7cd0a97 Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Fri, 6 Sep 2024 14:48:50 +0200
Subject: [PATCH] Only allow selective unfree packages in onlyoffice container

---
 hosts/stratus/containers/onlyoffice/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/stratus/containers/onlyoffice/default.nix b/hosts/stratus/containers/onlyoffice/default.nix
index 8b15019..e82b9dc 100644
--- a/hosts/stratus/containers/onlyoffice/default.nix
+++ b/hosts/stratus/containers/onlyoffice/default.nix
@@ -1,13 +1,13 @@
 {
   containers.onlyoffice.config =
-    { config, ... }:
+    { config, lib, ... }:
     {
       sops.secrets."onlyoffice-secret-key" = {
         owner = config.users.users.onlyoffice.name;
         inherit (config.users.users.onlyoffice) group;
       };
 
-      nixpkgs.config.allowUnfree = true;
+      nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "corefonts" ];
 
       services.onlyoffice = {
         enable = true;