framework: unfree predicate module

lf => yazy
add grayjay

nixos/modules/predicate.nix

@@ -0,0 +1,16 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  options = {
+    allowUnfreePkgNames = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+    };
+  };
+
+  config = {
+    nixpkgs.config.allowUnfreePredicate = pkg:
+      builtins.elem (lib.getName pkg) config.allowUnfreePkgNames;
+  };
+}

nixos/modules/work.nix

@@ -6,14 +6,13 @@
 }: let
   user = config.user;
 in {
-  nixpkgs.config.allowUnfreePredicate = pkg:
-    builtins.elem (lib.getName pkg) [
-      # nonfree vscode required for dev containers
-      "vscode"
-      "steam-run"
-      "postman"
-      "drawio" # the creator had a hissyfit over a negative review: https://github.com/jgraph/drawio/discussions/4623
-    ];
+  allowUnfreePkgNames = [
+    # nonfree vscode required for dev containers
+    "vscode"
+    "steam-run"
+    "postman"
+    "drawio" # the creator had a hissyfit over a negative review: https://github.com/jgraph/drawio/discussions/4623
+  ];
 
   nixpkgs.config.permittedInsecurePackages = [
     "openssl-1.1.1w" # required for mongodb

nixos/programs/gamer.nix

@@ -1,16 +1,11 @@
-{
-  lib,
-  pkgs,
-  ...
-}: {
-  nixpkgs.config.allowUnfreePredicate = pkg:
-    builtins.elem (lib.getName pkg) [
-      "steam"
-      "steam-unwrapped"
-      "steam-run"
-      "steam-original"
-      "osu-lazer"
-    ];
+{...}: {
+  allowUnfreePkgNames = [
+    "steam"
+    "steam-unwrapped"
+    "steam-run"
+    "steam-original"
+    "osu-lazer"
+  ];
   programs.steam = {
     enable = true;
     remotePlay.openFirewall = true;

nixos/workstation.nix

@@ -102,4 +102,8 @@
   services.udev.extraRules = ''
     KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="3434", ATTRS{idProduct}=="0e60", MODE="0660", GROUP="users", TAG+="uaccess", TAG+="udev-acl"
   '';
+
+  allowUnfreePkgNames = [
+    "grayjay"
+  ];
 }