{ config, lib, pkgs, ... }: { nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "veracrypt" ]; environment.systemPackages = [ pkgs.veracrypt ]; }