{ config, pkgs, lib, ... }: {
  nixpkgs.config.allowUnfreePredicate = pkg:
    builtins.elem (lib.getName pkg) [ "fahclient" ];
  services.foldingathome = {
    enable = true;
    user = "cyplo";
  };
  boot.kernel.sysctl = { "kernel.unprivileged_userns_clone" = 1; };
}