Set nixpkgs.config.allowUnfree = true

The upstream default is false, and I want some proprietary apps.