{ outputs, ... }:
{
  # Configure nixpkgs
  nixpkgs = {
    overlays = [
      outputs.overlays.nixpkgs-unstable
      outputs.overlays.nixpkgs-stable
    ];

    config = {
      # Enable non free
      allowUnfree = true;

      # enable cuda support
      cudaSupport = true;
      allowUnfreePredicate = p:
        builtins.all (
          license:
          license.free
          || builtins.elem license.shortName [
            "CUDA EULA"
            "cuDNN EULA"
            "cuTENSOR EULA"
            "NVidia OptiX EULA"
          ]
        ) (if builtins.isList p.meta.license then p.meta.license else [ p.meta.license ]);

      permittedInsecurePackages = [
        # ...
        "authentik-2024.6.4" # todo: remove these
        "python3.12-authentik-django-2024.6.4"
        "authentik-webui-2024.6.4"
        "authentik-client-api-2024.6.4"
        "authentik-website-2024.6.4"
        "authentik-proxy-2024.6.4"
        "aspnetcore-runtime-6.0.36"
        "aspnetcore-runtime-wrapped-6.0.36"
        "dotnet-sdk-6.0.428"
        "dotnet-sdk-wrapped-6.0.428"
      ];
    };
  };
}