flake fix

configuration.nix

@@ -1,7 +1,9 @@
 { pkgs, hyper, inputs, ... }:
 {
-  imports = ([
+  imports = [
     inputs.sops-nix.nixosModules.sops
+    inputs.nixpkgs.nixosModules.readOnlyPkgs
+
     ./system-modules/adb.nix
     ./system-modules/auto-mount.nix
     ./system-modules/calendar.nix
@@ -40,7 +42,7 @@
     ./system-modules/users.nix
     ./system-modules/virtualisation.nix
     ./system-modules/ydotool.nix
-  ]) ++ (if (hyper.host == "NxACE") then [ 
+  ] ++ (if (hyper.host == "NxACE") then [ 
     ./system-modules/nx2site.nix
     ./system-modules/hugo.nix
     ./system-modules/postgres.nix
@@ -134,9 +136,9 @@
   systemd.extraConfig = "DefaultLimitNOFILE=2048";
   boot.tmp.useTmpfs = false; 
 
-  system.stateVersion = "25.05";
+  system.stateVersion = pkgs.version;
 
-  nixpkgs.config.allowUnfree = true;
+  nixpkgs.pkgs = pkgs;
 
   nix = {
     settings = {